Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-07-22_cbc833251bc03a569b83b78e268acd97_bkransomware

  • Size

    172KB

  • Sample

    240722-tb3g1awcrq

  • MD5

    cbc833251bc03a569b83b78e268acd97

  • SHA1

    3e140a2f507bd8609fdd576075e29de792114ee4

  • SHA256

    7f781b930315bdfcbd1832feec7e2896fb1986498157d253895e5bd285d87373

  • SHA512

    319e733aa718bcf46cb59e85a46d318a596b3763dcaf7c32581acfe8c513a2451fb579edb9c55474a9bad3d09c8c8a22f2e919dcc1135c288cd7299dace71b56

  • SSDEEP

    3072:ZhpAyazIlyazTCKncoIhVA9xce4CLJaPQal7tn3P+Za4:hZMazbnhw+9xj1aYmWd

Malware Config

Targets

    • Target

      2024-07-22_cbc833251bc03a569b83b78e268acd97_bkransomware

    • Size

      172KB

    • MD5

      cbc833251bc03a569b83b78e268acd97

    • SHA1

      3e140a2f507bd8609fdd576075e29de792114ee4

    • SHA256

      7f781b930315bdfcbd1832feec7e2896fb1986498157d253895e5bd285d87373

    • SHA512

      319e733aa718bcf46cb59e85a46d318a596b3763dcaf7c32581acfe8c513a2451fb579edb9c55474a9bad3d09c8c8a22f2e919dcc1135c288cd7299dace71b56

    • SSDEEP

      3072:ZhpAyazIlyazTCKncoIhVA9xce4CLJaPQal7tn3P+Za4:hZMazbnhw+9xj1aYmWd

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks