Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-02_0f7472a971ff9d71d41c52b034542a96_bkransomware

  • Size

    28.0MB

  • Sample

    240502-jl8fwscf3t

  • MD5

    0f7472a971ff9d71d41c52b034542a96

  • SHA1

    84c39f084c64c6fa70af21d461a576d46cf55d9b

  • SHA256

    6ba8dca5e199bc7a8ff72f007ad578dab1ce7d0f90bac6063854d4df79033cfc

  • SHA512

    56758d06fab7b3b805b4c072d8b700f9662ce7b3092380924cb4c728a925e589b5caab50bc059373558bb66c584e587ccc545bad845254fcf891e8cd09c39de3

  • SSDEEP

    786432:To34n+em4k8rrCKoayYfqAtUGxOh5TNO8dASt:TsImo0XDG6G8d/t

Malware Config

Targets

    • Target

      2024-05-02_0f7472a971ff9d71d41c52b034542a96_bkransomware

    • Size

      28.0MB

    • MD5

      0f7472a971ff9d71d41c52b034542a96

    • SHA1

      84c39f084c64c6fa70af21d461a576d46cf55d9b

    • SHA256

      6ba8dca5e199bc7a8ff72f007ad578dab1ce7d0f90bac6063854d4df79033cfc

    • SHA512

      56758d06fab7b3b805b4c072d8b700f9662ce7b3092380924cb4c728a925e589b5caab50bc059373558bb66c584e587ccc545bad845254fcf891e8cd09c39de3

    • SSDEEP

      786432:To34n+em4k8rrCKoayYfqAtUGxOh5TNO8dASt:TsImo0XDG6G8d/t

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks