Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    40b774565b57b2baaa0fb9ff4b93d200N.exe

  • Size

    1.4MB

  • Sample

    240723-bl7wcszbqj

  • MD5

    40b774565b57b2baaa0fb9ff4b93d200

  • SHA1

    b648b6779807b915dba741ad9f70e48bd3a0e261

  • SHA256

    836e482241225a1a725ec9ae5b51ff1284dcb4d141e212029eac2bb171ecdfe9

  • SHA512

    e51da9fe882af119a0e7c9ecd905897036088ac0822002e4f9ea7211b01885f0ec3dfa9fba522cbe9958d40c0b7f86ecd0015c6221a76efdd3fe497d49b58141

  • SSDEEP

    24576:864g2QIxGiEegTy5zThwsP7GoogSCmeYZ/FnjUWnLSB/OopYh/2H07f9/aYc859H:5bMEegCTh/Koo5j/jLSM12H4fBVj9d

Malware Config

Targets

    • Target

      40b774565b57b2baaa0fb9ff4b93d200N.exe

    • Size

      1.4MB

    • MD5

      40b774565b57b2baaa0fb9ff4b93d200

    • SHA1

      b648b6779807b915dba741ad9f70e48bd3a0e261

    • SHA256

      836e482241225a1a725ec9ae5b51ff1284dcb4d141e212029eac2bb171ecdfe9

    • SHA512

      e51da9fe882af119a0e7c9ecd905897036088ac0822002e4f9ea7211b01885f0ec3dfa9fba522cbe9958d40c0b7f86ecd0015c6221a76efdd3fe497d49b58141

    • SSDEEP

      24576:864g2QIxGiEegTy5zThwsP7GoogSCmeYZ/FnjUWnLSB/OopYh/2H07f9/aYc859H:5bMEegCTh/Koo5j/jLSM12H4fBVj9d

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks