Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-07-25_68daf21a54b0706994e91eef07f5bc25_bkransomware

  • Size

    1.8MB

  • Sample

    240725-mtys7sthnq

  • MD5

    68daf21a54b0706994e91eef07f5bc25

  • SHA1

    8eb8b61add1a99dc671585064cc9c75eb0e8e7c5

  • SHA256

    95884c8d6a5b254e330a1e35b19ca99eacbeb147fcfb6cea2af1625e2d4303f5

  • SHA512

    cf5ab6ae3456b744ba6568dba23afeed9581dc99bbff90a4496cde7f0076fe8e7906fff60714714ac3a2aa70885a0e786e2c053e1dbc38340b309a1523830372

  • SSDEEP

    49152:yE19+ApwXk1QE1RzsEQPaxHNIaB0zj0yjoB2:X93wXmoK/B2Yyjl

Malware Config

Targets

    • Target

      2024-07-25_68daf21a54b0706994e91eef07f5bc25_bkransomware

    • Size

      1.8MB

    • MD5

      68daf21a54b0706994e91eef07f5bc25

    • SHA1

      8eb8b61add1a99dc671585064cc9c75eb0e8e7c5

    • SHA256

      95884c8d6a5b254e330a1e35b19ca99eacbeb147fcfb6cea2af1625e2d4303f5

    • SHA512

      cf5ab6ae3456b744ba6568dba23afeed9581dc99bbff90a4496cde7f0076fe8e7906fff60714714ac3a2aa70885a0e786e2c053e1dbc38340b309a1523830372

    • SSDEEP

      49152:yE19+ApwXk1QE1RzsEQPaxHNIaB0zj0yjoB2:X93wXmoK/B2Yyjl

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks