Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6eb8861b82e3cf762a0469f542123907cdac790ba122ae35236980d536763588

  • Size

    3.0MB

  • Sample

    240603-2qv1gacg26

  • MD5

    5e6ce16ce37d802d8a0a0c1b4f6484fc

  • SHA1

    967c73724d5be7496bde1204ab585e9e3af51824

  • SHA256

    6eb8861b82e3cf762a0469f542123907cdac790ba122ae35236980d536763588

  • SHA512

    a374ff050da7297c66254ba87ce86b82aff416e424776af13f19b76c52786fde820883833558b94d11379e4d22d142ffcfb464fe4099a59da2edd877fd893520

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBFB/bSqz8b6LNX:sxX7QnxrloE5dpUpKbVz8eLF

Malware Config

Targets

    • Target

      6eb8861b82e3cf762a0469f542123907cdac790ba122ae35236980d536763588

    • Size

      3.0MB

    • MD5

      5e6ce16ce37d802d8a0a0c1b4f6484fc

    • SHA1

      967c73724d5be7496bde1204ab585e9e3af51824

    • SHA256

      6eb8861b82e3cf762a0469f542123907cdac790ba122ae35236980d536763588

    • SHA512

      a374ff050da7297c66254ba87ce86b82aff416e424776af13f19b76c52786fde820883833558b94d11379e4d22d142ffcfb464fe4099a59da2edd877fd893520

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBFB/bSqz8b6LNX:sxX7QnxrloE5dpUpKbVz8eLF

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks