Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-29_73069e0f491358f7dfae0edb0da33a06_bkransomware

  • Size

    135KB

  • Sample

    240429-pa3zxsae2t

  • MD5

    73069e0f491358f7dfae0edb0da33a06

  • SHA1

    29ac4914a4fa37e3712f16301dac76bba2ee943b

  • SHA256

    f41e4801b3d6e727d339a3b21535a705824e1f44e9ce00f3586335b82d00e3c7

  • SHA512

    9bd1f2aaa9fd0f5005734de1cbf43cfc426831254a02d72b223ef10d42b33ca411a9ae2e2081f7e5281bc2e6841b17a22e3f8867144ae17698428776e280f6a8

  • SSDEEP

    1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazT8eX+F4ymoWXzBsxlLdLV+Q6fWoqUTb:ZhpAyazIlyazTTfoWuxp9VoeyIL/07

Malware Config

Targets

    • Target

      2024-04-29_73069e0f491358f7dfae0edb0da33a06_bkransomware

    • Size

      135KB

    • MD5

      73069e0f491358f7dfae0edb0da33a06

    • SHA1

      29ac4914a4fa37e3712f16301dac76bba2ee943b

    • SHA256

      f41e4801b3d6e727d339a3b21535a705824e1f44e9ce00f3586335b82d00e3c7

    • SHA512

      9bd1f2aaa9fd0f5005734de1cbf43cfc426831254a02d72b223ef10d42b33ca411a9ae2e2081f7e5281bc2e6841b17a22e3f8867144ae17698428776e280f6a8

    • SSDEEP

      1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazT8eX+F4ymoWXzBsxlLdLV+Q6fWoqUTb:ZhpAyazIlyazTTfoWuxp9VoeyIL/07

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks