Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    23b62dada4f5e1e602a4e0f9208c60463208610e4d81062e8b972a2a44b64f64

  • Size

    583KB

  • Sample

    240602-qstdwaed35

  • MD5

    60556e4b20fce0b271b4217af2a803a6

  • SHA1

    9de0c826bc1a91bf30c6828ce8fbea2f229018b5

  • SHA256

    23b62dada4f5e1e602a4e0f9208c60463208610e4d81062e8b972a2a44b64f64

  • SHA512

    788f8db0638f7f9b9ed22f74b3ca0086319c640cb71bdce2f3e366ded96587cb318e4ccb27167299ba8e531f62215c73faed9caff6eed8b0d556817de92f355c

  • SSDEEP

    6144:k/KW+aezDE7cV3iwbAFRWAbd4nf0H05yqE6Hl0ChW0+ksllAXBu0lWGWUJJQ4t0G:HW+aB7a3iwbihym2g7XO3LWUQfh4Co

Score
7/10

Malware Config

Targets

    • Target

      23b62dada4f5e1e602a4e0f9208c60463208610e4d81062e8b972a2a44b64f64

    • Size

      583KB

    • MD5

      60556e4b20fce0b271b4217af2a803a6

    • SHA1

      9de0c826bc1a91bf30c6828ce8fbea2f229018b5

    • SHA256

      23b62dada4f5e1e602a4e0f9208c60463208610e4d81062e8b972a2a44b64f64

    • SHA512

      788f8db0638f7f9b9ed22f74b3ca0086319c640cb71bdce2f3e366ded96587cb318e4ccb27167299ba8e531f62215c73faed9caff6eed8b0d556817de92f355c

    • SSDEEP

      6144:k/KW+aezDE7cV3iwbAFRWAbd4nf0H05yqE6Hl0ChW0+ksllAXBu0lWGWUJJQ4t0G:HW+aB7a3iwbihym2g7XO3LWUQfh4Co

    Score
    7/10
    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks