Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    SEOwnedDE__.dll

  • Size

    1.2MB

  • Sample

    240501-rr3ftsba56

  • MD5

    7dcd6b9fb9d80fec68c141926af5d6a7

  • SHA1

    d43c5d64e92f937c2797a3ac0ae41ad46077294d

  • SHA256

    8284063f205bbf9b0ef7dfb07f91cf4c42e93e41f59272a4318caa2070d4bcad

  • SHA512

    5461b8afc81b56ce5036d2c6b40851aba74aa4cdd37d3a590a2f81ee92b8101f15f369d1d024f7dac26ae5c8ced13098cf0e2cd033876f555c2ac84955c2a107

  • SSDEEP

    24576:bQksKmEHEJMBuYoPkcUHbZ5iMJ9hbHUzh0lhSMXlJ3Hnz:rogH3H0C53Hz

Score
8/10

Malware Config

Targets

    • Target

      SEOwnedDE__.dll

    • Size

      1.2MB

    • MD5

      7dcd6b9fb9d80fec68c141926af5d6a7

    • SHA1

      d43c5d64e92f937c2797a3ac0ae41ad46077294d

    • SHA256

      8284063f205bbf9b0ef7dfb07f91cf4c42e93e41f59272a4318caa2070d4bcad

    • SHA512

      5461b8afc81b56ce5036d2c6b40851aba74aa4cdd37d3a590a2f81ee92b8101f15f369d1d024f7dac26ae5c8ced13098cf0e2cd033876f555c2ac84955c2a107

    • SSDEEP

      24576:bQksKmEHEJMBuYoPkcUHbZ5iMJ9hbHUzh0lhSMXlJ3Hnz:rogH3H0C53Hz

    Score
    8/10
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks