Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-06_4ce9f9fd9985d4f4613173bbfb8c7c89_bkransomware

  • Size

    71KB

  • Sample

    240506-3c5s7aba92

  • MD5

    4ce9f9fd9985d4f4613173bbfb8c7c89

  • SHA1

    34bcfe0d4077a4075604199b1b59eb5b6c869b19

  • SHA256

    709fda5f67ce10774ba93082410e662ed6491deda7d9a7c83460a739a841a43e

  • SHA512

    407ecbc8afcc6266265f6d813afe414c68f700ddb879c3d0bec1c5e68edbab868028ab17285e24fe1990351aaa99bcc23b45061c8a2c2a78866106c70823799d

  • SSDEEP

    1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTP:ZRpAyazIliazTP

Malware Config

Targets

    • Target

      2024-05-06_4ce9f9fd9985d4f4613173bbfb8c7c89_bkransomware

    • Size

      71KB

    • MD5

      4ce9f9fd9985d4f4613173bbfb8c7c89

    • SHA1

      34bcfe0d4077a4075604199b1b59eb5b6c869b19

    • SHA256

      709fda5f67ce10774ba93082410e662ed6491deda7d9a7c83460a739a841a43e

    • SHA512

      407ecbc8afcc6266265f6d813afe414c68f700ddb879c3d0bec1c5e68edbab868028ab17285e24fe1990351aaa99bcc23b45061c8a2c2a78866106c70823799d

    • SSDEEP

      1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTP:ZRpAyazIliazTP

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks