Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d6b810b58c554228c3902de31d960ac23cbc9da0b86fa78d9e9f436fc85cad0e

  • Size

    3.6MB

  • Sample

    240711-g62sqswamb

  • MD5

    d878c955d9081278cb8931d573558e5f

  • SHA1

    3c27ca895e6ffa55e97e881db5343b73e39533cd

  • SHA256

    d6b810b58c554228c3902de31d960ac23cbc9da0b86fa78d9e9f436fc85cad0e

  • SHA512

    5fa7f01f14fc9843f96f4bbd939986a6454f9741825b860174c11d31e49a36942ed76c4118a36783b3d7752824563ce3201f1ced0db109e0d2f2cf9674efa59b

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBQB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpPbVz8eLFcz

Malware Config

Targets

    • Target

      d6b810b58c554228c3902de31d960ac23cbc9da0b86fa78d9e9f436fc85cad0e

    • Size

      3.6MB

    • MD5

      d878c955d9081278cb8931d573558e5f

    • SHA1

      3c27ca895e6ffa55e97e881db5343b73e39533cd

    • SHA256

      d6b810b58c554228c3902de31d960ac23cbc9da0b86fa78d9e9f436fc85cad0e

    • SHA512

      5fa7f01f14fc9843f96f4bbd939986a6454f9741825b860174c11d31e49a36942ed76c4118a36783b3d7752824563ce3201f1ced0db109e0d2f2cf9674efa59b

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBQB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpPbVz8eLFcz

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks