Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    eb0c15d0a6fc28d1a7a6e558e18b731e609e520fd9122077b5dd6022133e5636

  • Size

    81KB

  • Sample

    240609-nx9kjsab7y

  • MD5

    36280ede77de4cbb4ed3595e28e49813

  • SHA1

    e3ce9ada9ea1c4b53ca3858a3f71168c33622bf3

  • SHA256

    eb0c15d0a6fc28d1a7a6e558e18b731e609e520fd9122077b5dd6022133e5636

  • SHA512

    28a259cb2f878da8117947b63aa9517944f0660d4def559bf6307a0d04b388894407de7d60ff03df4ac9a80dca1f2923f2590c6ca499abd8e45b7c056261482e

  • SSDEEP

    768:XUTNK2cNW0QbRsWjcd+6yBFLqJ4Z8qx70RM8/O/B2ZR1RGbLLRNeorZ9p:kzcNjQlsWjcd+xzl7SM+Gb5NeorZ9p

Malware Config

Targets

    • Target

      eb0c15d0a6fc28d1a7a6e558e18b731e609e520fd9122077b5dd6022133e5636

    • Size

      81KB

    • MD5

      36280ede77de4cbb4ed3595e28e49813

    • SHA1

      e3ce9ada9ea1c4b53ca3858a3f71168c33622bf3

    • SHA256

      eb0c15d0a6fc28d1a7a6e558e18b731e609e520fd9122077b5dd6022133e5636

    • SHA512

      28a259cb2f878da8117947b63aa9517944f0660d4def559bf6307a0d04b388894407de7d60ff03df4ac9a80dca1f2923f2590c6ca499abd8e45b7c056261482e

    • SSDEEP

      768:XUTNK2cNW0QbRsWjcd+6yBFLqJ4Z8qx70RM8/O/B2ZR1RGbLLRNeorZ9p:kzcNjQlsWjcd+xzl7SM+Gb5NeorZ9p

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks