Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    676f5189cda27c25fe617c84fb7162c0N.exe

  • Size

    1.6MB

  • Sample

    240713-jafaza1gpl

  • MD5

    676f5189cda27c25fe617c84fb7162c0

  • SHA1

    7968430512c4f14369c30bd0bbb47da075351cf1

  • SHA256

    0b82d816aaf6d0a08b34517fa3eb561490f48d283187cc321b0f367f24ed173d

  • SHA512

    374e239df9dae649af26ab91cd4717db55e17099542247a8dead41b93930f4179f79a94e4dfc2552ea087338eaa925cc2b6f79e94c670e804180aa45ee50ed18

  • SSDEEP

    49152:VFjEfiCcvDSkawjapIzdNxDLCUHxZqS6RCU:HrEjRIzHxPBRZqS6RCU

Malware Config

Targets

    • Target

      676f5189cda27c25fe617c84fb7162c0N.exe

    • Size

      1.6MB

    • MD5

      676f5189cda27c25fe617c84fb7162c0

    • SHA1

      7968430512c4f14369c30bd0bbb47da075351cf1

    • SHA256

      0b82d816aaf6d0a08b34517fa3eb561490f48d283187cc321b0f367f24ed173d

    • SHA512

      374e239df9dae649af26ab91cd4717db55e17099542247a8dead41b93930f4179f79a94e4dfc2552ea087338eaa925cc2b6f79e94c670e804180aa45ee50ed18

    • SSDEEP

      49152:VFjEfiCcvDSkawjapIzdNxDLCUHxZqS6RCU:HrEjRIzHxPBRZqS6RCU

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks