Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    357b1898c34a5f4ba724bbda5a3aa1a4907f24d523d2a3f4ac119d7209c195b3

  • Size

    78KB

  • Sample

    240611-y9qcjs1ajd

  • MD5

    5e02407033185d765834623f0fa8aa87

  • SHA1

    59940bd13d7c293313eb240b806d16dfae234b72

  • SHA256

    357b1898c34a5f4ba724bbda5a3aa1a4907f24d523d2a3f4ac119d7209c195b3

  • SHA512

    7e9058b794bf829a3426a33419c67698e0217c9db11e91262de31b9406b52eac918843d38941a39c10e628b82438556e93ba81407b97ec8edf2fee1ffc1700ce

  • SSDEEP

    768:hpQNwC3BEddsEqOt/hyJF+x3BEJwRrPHisKl4qhx:reTce/U/hKYuKPHisKldhx

Malware Config

Targets

    • Target

      357b1898c34a5f4ba724bbda5a3aa1a4907f24d523d2a3f4ac119d7209c195b3

    • Size

      78KB

    • MD5

      5e02407033185d765834623f0fa8aa87

    • SHA1

      59940bd13d7c293313eb240b806d16dfae234b72

    • SHA256

      357b1898c34a5f4ba724bbda5a3aa1a4907f24d523d2a3f4ac119d7209c195b3

    • SHA512

      7e9058b794bf829a3426a33419c67698e0217c9db11e91262de31b9406b52eac918843d38941a39c10e628b82438556e93ba81407b97ec8edf2fee1ffc1700ce

    • SSDEEP

      768:hpQNwC3BEddsEqOt/hyJF+x3BEJwRrPHisKl4qhx:reTce/U/hKYuKPHisKldhx

    • Modifies visibility of file extensions in Explorer

    • Disables RegEdit via registry modification

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks