Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-05_090e23a53b766958eb9f283932ea287a_bkransomware

  • Size

    71KB

  • Sample

    240505-fa359afc9x

  • MD5

    090e23a53b766958eb9f283932ea287a

  • SHA1

    33ff8fa3608909ab1e24fb3c8edae34d65d766c7

  • SHA256

    72b9c995ece99c2f1d2327664ade881275c863c1125cea3312d706ea143062a7

  • SHA512

    ce2fe5370850af341fa523a8c7b51374655c49f101d7f74a0634e266039f87304bd87a809215e63a874e8518e7a1243460968e879d92318f681442f45f82767e

  • SSDEEP

    1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTU:ZRpAyazIliazTU

Malware Config

Targets

    • Target

      2024-05-05_090e23a53b766958eb9f283932ea287a_bkransomware

    • Size

      71KB

    • MD5

      090e23a53b766958eb9f283932ea287a

    • SHA1

      33ff8fa3608909ab1e24fb3c8edae34d65d766c7

    • SHA256

      72b9c995ece99c2f1d2327664ade881275c863c1125cea3312d706ea143062a7

    • SHA512

      ce2fe5370850af341fa523a8c7b51374655c49f101d7f74a0634e266039f87304bd87a809215e63a874e8518e7a1243460968e879d92318f681442f45f82767e

    • SSDEEP

      1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTU:ZRpAyazIliazTU

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks