Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e53c2f42d7359f98b0827889379eae42aa32bb454e57cf12949f39364594b651

  • Size

    1.8MB

  • Sample

    240524-afr3aaed83

  • MD5

    09f8786e67b013d415a5d0f5094fe912

  • SHA1

    634b1b41dc92f30dc2fcca2d3da33fc7fb10f29d

  • SHA256

    e53c2f42d7359f98b0827889379eae42aa32bb454e57cf12949f39364594b651

  • SHA512

    0af7d63c80bc964fe2725e7654c63a1385606c54fca72457ee099a4d8045a5e22565f0b2cf10036397f7defe3be60e91e823bb61464ce017023b39789432fd94

  • SSDEEP

    24576:j3vLR2VhZBJ905EmMyPnQxhe4/LwvHYgXkQJCtHYX6kDC/hR:j3dUZTHzLAlUQhK

Malware Config

Targets

    • Target

      e53c2f42d7359f98b0827889379eae42aa32bb454e57cf12949f39364594b651

    • Size

      1.8MB

    • MD5

      09f8786e67b013d415a5d0f5094fe912

    • SHA1

      634b1b41dc92f30dc2fcca2d3da33fc7fb10f29d

    • SHA256

      e53c2f42d7359f98b0827889379eae42aa32bb454e57cf12949f39364594b651

    • SHA512

      0af7d63c80bc964fe2725e7654c63a1385606c54fca72457ee099a4d8045a5e22565f0b2cf10036397f7defe3be60e91e823bb61464ce017023b39789432fd94

    • SSDEEP

      24576:j3vLR2VhZBJ905EmMyPnQxhe4/LwvHYgXkQJCtHYX6kDC/hR:j3dUZTHzLAlUQhK

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks