Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9d0856284929b3636ba00ee3f3b848d80312e076eb1d0dec125cbb3e389f5c15

  • Size

    2.0MB

  • Sample

    240616-a2hqqssanc

  • MD5

    b1e962e0aced0fecd607585e68525a10

  • SHA1

    8a9eebbee5a90504f296d67d34079c9a6c602c10

  • SHA256

    9d0856284929b3636ba00ee3f3b848d80312e076eb1d0dec125cbb3e389f5c15

  • SHA512

    056d5886b6ba4cbe8b525689f9461f25ca83873076c97d85e4ccf95b08e08f65313cf1675b67ff0bf8f85b27a699a16b3e60f8f35da2597b4bbcded0f200cc2e

  • SSDEEP

    6144:7rb74D5EJNqOZQl3pOESErIOXoLbpCNr49+gOB+k6WQUoig934jrkolLyZH:Hb7q5EJNysCxXoLbmBBBIWloig5N+Ly

Malware Config

Targets

    • Target

      9d0856284929b3636ba00ee3f3b848d80312e076eb1d0dec125cbb3e389f5c15

    • Size

      2.0MB

    • MD5

      b1e962e0aced0fecd607585e68525a10

    • SHA1

      8a9eebbee5a90504f296d67d34079c9a6c602c10

    • SHA256

      9d0856284929b3636ba00ee3f3b848d80312e076eb1d0dec125cbb3e389f5c15

    • SHA512

      056d5886b6ba4cbe8b525689f9461f25ca83873076c97d85e4ccf95b08e08f65313cf1675b67ff0bf8f85b27a699a16b3e60f8f35da2597b4bbcded0f200cc2e

    • SSDEEP

      6144:7rb74D5EJNqOZQl3pOESErIOXoLbpCNr49+gOB+k6WQUoig934jrkolLyZH:Hb7q5EJNysCxXoLbmBBBIWloig5N+Ly

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks