Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    05d4949f5566cac3c9a7d327904e2603.exe

  • Size

    1.9MB

  • Sample

    240504-v19haafe66

  • MD5

    05d4949f5566cac3c9a7d327904e2603

  • SHA1

    2d4a5106bb8fe7e81439c4f1a6b2101efc966239

  • SHA256

    5c2b0e035f477e5a2e3ddff5ca746723993af0f2c9e1b77cd911048d8a09d37d

  • SHA512

    666dedf53270ed5d1076be1adf8e416df9971c246bc719ad861e5d193446c7cca5faa9efb7b2aecfae700caeabd31367c6bd3f3f991d67e872a0c5a95f1b093b

  • SSDEEP

    49152:+OhyHMTt08QU+3gEg81yIKL3NhI+3Yoi4XT6+/I3Gu:+OMktT+3E8oIKH31XTfMx

Malware Config

Targets

    • Target

      05d4949f5566cac3c9a7d327904e2603.exe

    • Size

      1.9MB

    • MD5

      05d4949f5566cac3c9a7d327904e2603

    • SHA1

      2d4a5106bb8fe7e81439c4f1a6b2101efc966239

    • SHA256

      5c2b0e035f477e5a2e3ddff5ca746723993af0f2c9e1b77cd911048d8a09d37d

    • SHA512

      666dedf53270ed5d1076be1adf8e416df9971c246bc719ad861e5d193446c7cca5faa9efb7b2aecfae700caeabd31367c6bd3f3f991d67e872a0c5a95f1b093b

    • SSDEEP

      49152:+OhyHMTt08QU+3gEg81yIKL3NhI+3Yoi4XT6+/I3Gu:+OMktT+3E8oIKH31XTfMx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks