Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    56d713bf7ccc456c6b29b7362b08dfa7e200acc0b21b283d949a54f3a27042ad

  • Size

    7.2MB

  • Sample

    240711-2g86qsxcrl

  • MD5

    b31e27b00781e72004147d1d49675fef

  • SHA1

    8a7529ea0b52c8cdf2ee0c85ec0af09dcd9c157f

  • SHA256

    56d713bf7ccc456c6b29b7362b08dfa7e200acc0b21b283d949a54f3a27042ad

  • SHA512

    35310f9a55916758403f212344758156cf56a90c8cbab4d0d87e0e96db9a94da8526b5df7083e4b26938da9dd79ed201bc1950a320c1fee162a4098ccb188044

  • SSDEEP

    196608:91OHzJaVk0fZhEF8H7v5467/tfE/UOYAOC2oMbnus8G8:3OHzJaVpEF8bq67/tcULCXMCsF8

Malware Config

Targets

    • Target

      56d713bf7ccc456c6b29b7362b08dfa7e200acc0b21b283d949a54f3a27042ad

    • Size

      7.2MB

    • MD5

      b31e27b00781e72004147d1d49675fef

    • SHA1

      8a7529ea0b52c8cdf2ee0c85ec0af09dcd9c157f

    • SHA256

      56d713bf7ccc456c6b29b7362b08dfa7e200acc0b21b283d949a54f3a27042ad

    • SHA512

      35310f9a55916758403f212344758156cf56a90c8cbab4d0d87e0e96db9a94da8526b5df7083e4b26938da9dd79ed201bc1950a320c1fee162a4098ccb188044

    • SSDEEP

      196608:91OHzJaVk0fZhEF8H7v5467/tfE/UOYAOC2oMbnus8G8:3OHzJaVpEF8bq67/tcULCXMCsF8

    • Modifies Windows Defender Real-time Protection settings

    • Windows security bypass

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.