Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6139ab6b612fc332c911450420a9e4b0_NEAS

  • Size

    3.0MB

  • Sample

    240507-ej4ygaha2y

  • MD5

    6139ab6b612fc332c911450420a9e4b0

  • SHA1

    ae1e1c6ece9f0350955e1cdc2da45ade23cebda7

  • SHA256

    606d3057346457a803c665ab8d0efe7990754bf8989b10e05855f623e1b62b81

  • SHA512

    aeefe878e8dc03ea6541133a3ee2538e776c15fd4e590f55656f0763530797b1b29d088e9d6fd44fae391ccd930000ea72f7d504ca597df0bdc9650e8460ba9f

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBcB/bSqz8b6LNX:sxX7QnxrloE5dpUpvbVz8eLF

Malware Config

Targets

    • Target

      6139ab6b612fc332c911450420a9e4b0_NEAS

    • Size

      3.0MB

    • MD5

      6139ab6b612fc332c911450420a9e4b0

    • SHA1

      ae1e1c6ece9f0350955e1cdc2da45ade23cebda7

    • SHA256

      606d3057346457a803c665ab8d0efe7990754bf8989b10e05855f623e1b62b81

    • SHA512

      aeefe878e8dc03ea6541133a3ee2538e776c15fd4e590f55656f0763530797b1b29d088e9d6fd44fae391ccd930000ea72f7d504ca597df0bdc9650e8460ba9f

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBcB/bSqz8b6LNX:sxX7QnxrloE5dpUpvbVz8eLF

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks