Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-09_b8312762750b417f1f724b45eee35b9a_bkransomware

  • Size

    135KB

  • Sample

    240509-lhz2fsdg92

  • MD5

    b8312762750b417f1f724b45eee35b9a

  • SHA1

    759294c86f682af3e0b2afcdb68852b7a8c5233d

  • SHA256

    c3aa8f8fdb4c960f3b695cb5b6404aacb35f8d8bbdcdf1a32808b076ee275aba

  • SHA512

    b03adbbee92794f0d940e329726b17ddcb8a1168eee10e67a0199897e972c8c76617a827e07917d2cf02b872a95268b9e539258c14b02cdc19ea4dc0d802d509

  • SSDEEP

    1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTd31w+WGnH/Qwlwa+6eylvvAYOTU0TD:ZhpAyazIlyazTd3pH/QwL1vvwYONJ4FK

Malware Config

Targets

    • Target

      2024-05-09_b8312762750b417f1f724b45eee35b9a_bkransomware

    • Size

      135KB

    • MD5

      b8312762750b417f1f724b45eee35b9a

    • SHA1

      759294c86f682af3e0b2afcdb68852b7a8c5233d

    • SHA256

      c3aa8f8fdb4c960f3b695cb5b6404aacb35f8d8bbdcdf1a32808b076ee275aba

    • SHA512

      b03adbbee92794f0d940e329726b17ddcb8a1168eee10e67a0199897e972c8c76617a827e07917d2cf02b872a95268b9e539258c14b02cdc19ea4dc0d802d509

    • SSDEEP

      1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTd31w+WGnH/Qwlwa+6eylvvAYOTU0TD:ZhpAyazIlyazTd3pH/QwL1vvwYONJ4FK

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks