Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0fdcff5d7da9977c8404266a30c5c9b0N.exe

  • Size

    565KB

  • Sample

    240720-1nc67syfkl

  • MD5

    0fdcff5d7da9977c8404266a30c5c9b0

  • SHA1

    90bcd93b68b09605a883b911e17a40e5c7b7c663

  • SHA256

    c537669a24dfc0a6d93c2da23a874b12b78bc6ff6ccb92adc648fc94023989c6

  • SHA512

    9d1cb81224eeb91dd04228dc8d7f517e95a3805d163e746dad84340a6c9bd1f5ecb73b83463a1656d3bc20c90d28602adf0ddc68399c2db267a9eb63fa6895c4

  • SSDEEP

    12288:A//vi9BpDVjj3zDaBRI12SPF2mtEjQSAI2Gt0JNSdP2onU:2w1dj3aBE2SdNtfBG2OdOoU

Malware Config

Targets

    • Target

      0fdcff5d7da9977c8404266a30c5c9b0N.exe

    • Size

      565KB

    • MD5

      0fdcff5d7da9977c8404266a30c5c9b0

    • SHA1

      90bcd93b68b09605a883b911e17a40e5c7b7c663

    • SHA256

      c537669a24dfc0a6d93c2da23a874b12b78bc6ff6ccb92adc648fc94023989c6

    • SHA512

      9d1cb81224eeb91dd04228dc8d7f517e95a3805d163e746dad84340a6c9bd1f5ecb73b83463a1656d3bc20c90d28602adf0ddc68399c2db267a9eb63fa6895c4

    • SSDEEP

      12288:A//vi9BpDVjj3zDaBRI12SPF2mtEjQSAI2Gt0JNSdP2onU:2w1dj3aBE2SdNtfBG2OdOoU

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks