Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-03_3f49917174cabe36df91223337531089_bkransomware

  • Size

    214KB

  • Sample

    240503-mrm9paeg23

  • MD5

    3f49917174cabe36df91223337531089

  • SHA1

    1bc873296afcb461566b8a173cc4896f4dafe278

  • SHA256

    564bded93fef228fe65c8699df43be1c8187e6a2ab92884d878b284bc76f8b9b

  • SHA512

    9e1284bf2641db7e570be55a3e6d2eeecdb993107b21b7eb14cc82b8bf426d24fb04ab1be7f404fb348733c924d229e5ec8226767644b67c7890cf36c2935ce0

  • SSDEEP

    3072:ZhpAyazIlyazTp0H+iIlIJ6+8+cYbmmRdhV/IbiVMmQzy94GSu/BcclsL76w:hZMaz10eiIe6+ZCmR5w+2moql/FmH6w

Malware Config

Targets

    • Target

      2024-05-03_3f49917174cabe36df91223337531089_bkransomware

    • Size

      214KB

    • MD5

      3f49917174cabe36df91223337531089

    • SHA1

      1bc873296afcb461566b8a173cc4896f4dafe278

    • SHA256

      564bded93fef228fe65c8699df43be1c8187e6a2ab92884d878b284bc76f8b9b

    • SHA512

      9e1284bf2641db7e570be55a3e6d2eeecdb993107b21b7eb14cc82b8bf426d24fb04ab1be7f404fb348733c924d229e5ec8226767644b67c7890cf36c2935ce0

    • SSDEEP

      3072:ZhpAyazIlyazTp0H+iIlIJ6+8+cYbmmRdhV/IbiVMmQzy94GSu/BcclsL76w:hZMaz10eiIe6+ZCmR5w+2moql/FmH6w

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks