Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7584a6f5123fccb6ed9aaebc8d8dae61e095eb14cbb3032cc1be24bae7aa77b4

  • Size

    1.3MB

  • Sample

    240513-maa8ssag98

  • MD5

    dab80084544a9fa4b7fb6dee9327d264

  • SHA1

    80c43465df16c67a4cdee909ad0a91c9984d47f2

  • SHA256

    7584a6f5123fccb6ed9aaebc8d8dae61e095eb14cbb3032cc1be24bae7aa77b4

  • SHA512

    d0054a489219f64ae1c51d7952c7a4fb8e14e1cc7e91c8d50f3179f6084caf831e1e65ea6f8bbf0b4b0eef942c3f382f2ba32138422892ce58ff6d53700c3ec8

  • SSDEEP

    24576:Qak/7Nk4RZnKZu0zoFmDcpii9iGn+66rLfJIgtEqPILWz8oDqE:Qak/4Zu+k0WdEacJRIo+E

Malware Config

Targets

    • Target

      7584a6f5123fccb6ed9aaebc8d8dae61e095eb14cbb3032cc1be24bae7aa77b4

    • Size

      1.3MB

    • MD5

      dab80084544a9fa4b7fb6dee9327d264

    • SHA1

      80c43465df16c67a4cdee909ad0a91c9984d47f2

    • SHA256

      7584a6f5123fccb6ed9aaebc8d8dae61e095eb14cbb3032cc1be24bae7aa77b4

    • SHA512

      d0054a489219f64ae1c51d7952c7a4fb8e14e1cc7e91c8d50f3179f6084caf831e1e65ea6f8bbf0b4b0eef942c3f382f2ba32138422892ce58ff6d53700c3ec8

    • SSDEEP

      24576:Qak/7Nk4RZnKZu0zoFmDcpii9iGn+66rLfJIgtEqPILWz8oDqE:Qak/4Zu+k0WdEacJRIo+E

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.