Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-09_48089c930b2218e8d5c606c0d5505ee0_bkransomware

  • Size

    71KB

  • Sample

    240509-2dyktsab41

  • MD5

    48089c930b2218e8d5c606c0d5505ee0

  • SHA1

    0d85a6e9eb6131a10018ef1e305a87c0f6e4ee5f

  • SHA256

    1bf5f7de8b3d5aa44a5206e7fa26734c3abe8269803798f53bd44ddf46e04a1a

  • SHA512

    8b13782afeadeb64f69e7f7a125fe37f0b97d7393125f694e035f6bd18f6ab4807af71b8d5cc153dc9d16416a1790b4296388f31562225d63eb9a092d536b09c

  • SSDEEP

    1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTC:ZRpAyazIliazTC

Malware Config

Targets

    • Target

      2024-05-09_48089c930b2218e8d5c606c0d5505ee0_bkransomware

    • Size

      71KB

    • MD5

      48089c930b2218e8d5c606c0d5505ee0

    • SHA1

      0d85a6e9eb6131a10018ef1e305a87c0f6e4ee5f

    • SHA256

      1bf5f7de8b3d5aa44a5206e7fa26734c3abe8269803798f53bd44ddf46e04a1a

    • SHA512

      8b13782afeadeb64f69e7f7a125fe37f0b97d7393125f694e035f6bd18f6ab4807af71b8d5cc153dc9d16416a1790b4296388f31562225d63eb9a092d536b09c

    • SSDEEP

      1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTC:ZRpAyazIliazTC

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks