Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    sample

  • Size

    10KB

  • Sample

    240615-3l2g5azbna

  • MD5

    895d42041a1051b807262a6639a8f424

  • SHA1

    c67ef16175395271cf8ed23c83ebd50d5a8a8889

  • SHA256

    3819bc1db52d27e10d64e54bb78522cd821b93138b9efdb991edc696a63ce594

  • SHA512

    8bc37c117f3a5f2b40a630378a7e455c936f18636651ca3ec88e2df0f3a7fbe2849f2148242a5034d281f1d1cf9d078676937e85806bf53b03a69d20eb7a32fc

  • SSDEEP

    192:M9ynHDAHrH+UHETV/dS9Ooy4CUymFRBc0M/iwh9JGHAw/W6+Cup:MQH8zNHETV/dS977rx69JGHAe+Cup

Malware Config

Targets

    • Target

      sample

    • Size

      10KB

    • MD5

      895d42041a1051b807262a6639a8f424

    • SHA1

      c67ef16175395271cf8ed23c83ebd50d5a8a8889

    • SHA256

      3819bc1db52d27e10d64e54bb78522cd821b93138b9efdb991edc696a63ce594

    • SHA512

      8bc37c117f3a5f2b40a630378a7e455c936f18636651ca3ec88e2df0f3a7fbe2849f2148242a5034d281f1d1cf9d078676937e85806bf53b03a69d20eb7a32fc

    • SSDEEP

      192:M9ynHDAHrH+UHETV/dS9Ooy4CUymFRBc0M/iwh9JGHAw/W6+Cup:MQH8zNHETV/dS977rx69JGHAe+Cup

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks for any installed AV software in registry

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks