Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-04_9c4470fa3a31d90e505f264371252f62_bkransomware

  • Size

    74KB

  • Sample

    240504-ln4ltsch76

  • MD5

    9c4470fa3a31d90e505f264371252f62

  • SHA1

    484870198c0c3c41aa390bfbbc6a2f9aaf9c4d7b

  • SHA256

    3444e85b9dff2f89ff9083e9dec707415e894b687a4ebf281038d1063de4109c

  • SHA512

    1d72aa75513f7395fda6a5488f9d3f7c36c5bfa844c30a13e7925701210266adb303cb0a5598ef90ed3c8bd5e70089d79f93fd4cf198209eb3c6fa76d9bb9819

  • SSDEEP

    1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTD0mPT:ZRpAyazIliazTDT

Malware Config

Targets

    • Target

      2024-05-04_9c4470fa3a31d90e505f264371252f62_bkransomware

    • Size

      74KB

    • MD5

      9c4470fa3a31d90e505f264371252f62

    • SHA1

      484870198c0c3c41aa390bfbbc6a2f9aaf9c4d7b

    • SHA256

      3444e85b9dff2f89ff9083e9dec707415e894b687a4ebf281038d1063de4109c

    • SHA512

      1d72aa75513f7395fda6a5488f9d3f7c36c5bfa844c30a13e7925701210266adb303cb0a5598ef90ed3c8bd5e70089d79f93fd4cf198209eb3c6fa76d9bb9819

    • SSDEEP

      1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTD0mPT:ZRpAyazIliazTDT

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks