Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3abda73cd97e4ecd2c15acd7b4b18df0N.exe

  • Size

    2.6MB

  • Sample

    240803-c59pqsvfrg

  • MD5

    3abda73cd97e4ecd2c15acd7b4b18df0

  • SHA1

    c84fad2ca4ea6f2b8f9363cfab09e35d694c4c72

  • SHA256

    ebaa2ee442985be1f86ce0177910dfa98ddd7b08808219382801785acccaf39a

  • SHA512

    26092fa90df86d5beda8a7a7e244461ac41a5d860dafe76e2df2c781f0b4cce21fb414fe8f5926632dc0ec641ad5c34809df11985ee2451d64cf9a7ab8e3528d

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBkB/bS:sxX7QnxrloE5dpUp/b

Malware Config

Targets

    • Target

      3abda73cd97e4ecd2c15acd7b4b18df0N.exe

    • Size

      2.6MB

    • MD5

      3abda73cd97e4ecd2c15acd7b4b18df0

    • SHA1

      c84fad2ca4ea6f2b8f9363cfab09e35d694c4c72

    • SHA256

      ebaa2ee442985be1f86ce0177910dfa98ddd7b08808219382801785acccaf39a

    • SHA512

      26092fa90df86d5beda8a7a7e244461ac41a5d860dafe76e2df2c781f0b4cce21fb414fe8f5926632dc0ec641ad5c34809df11985ee2451d64cf9a7ab8e3528d

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBkB/bS:sxX7QnxrloE5dpUp/b

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks