Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Loader.exe

  • Size

    857KB

  • Sample

    240706-n1tcqsyakl

  • MD5

    2b4ca19ce32a373dde70fb0ebdf96fc7

  • SHA1

    0273612af7bd1080541d32496162f1a62bac27e6

  • SHA256

    6f18bcd3189e785d72b313e0d453eae7548af0b55a36eded240f532475f734da

  • SHA512

    89082aaaf1c11159b55ef038c4c7e303708f5b850d82b4302ba6903381c5f70ff80c9c2b54416a1211944fbc7fd9cf4fc6ef121b39a4de62692d277c21ab4b81

  • SSDEEP

    12288:kAyjhkgp8WRcJ/VQ/Rm8g5rbEU8cwqAWfg0um2IvZc94WvGGQsh61HdpTmgSBex2:8hk1sJRxyxAgFRZc94QbQsGTmBKy

Malware Config

Targets

    • Target

      Loader.exe

    • Size

      857KB

    • MD5

      2b4ca19ce32a373dde70fb0ebdf96fc7

    • SHA1

      0273612af7bd1080541d32496162f1a62bac27e6

    • SHA256

      6f18bcd3189e785d72b313e0d453eae7548af0b55a36eded240f532475f734da

    • SHA512

      89082aaaf1c11159b55ef038c4c7e303708f5b850d82b4302ba6903381c5f70ff80c9c2b54416a1211944fbc7fd9cf4fc6ef121b39a4de62692d277c21ab4b81

    • SSDEEP

      12288:kAyjhkgp8WRcJ/VQ/Rm8g5rbEU8cwqAWfg0um2IvZc94WvGGQsh61HdpTmgSBex2:8hk1sJRxyxAgFRZc94QbQsGTmBKy

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks