Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-08-03_1ed4f7087d455ac137f304bfa417def5_avoslocker_qakbot

  • Size

    1.2MB

  • Sample

    240804-aa6y9azdmm

  • MD5

    1ed4f7087d455ac137f304bfa417def5

  • SHA1

    c2f60d7c5bb26e297aff9118d3357b475272a96f

  • SHA256

    20f2746e7f5ce76ba65f0fdb57375ad5822942178f8eb940f6206d7ef982b408

  • SHA512

    b1b933ebc2edddb65cb28393258e09ab5e06c8de85f5dbb7144fb442f2540bff84b3da7f627d0dd4380df034d201affbdd90fabbacd4ce7769b05ad633b9ef8c

  • SSDEEP

    24576:yzd9Sm6s3SB4VbhzGcHb0bBhXxtyesOlU0YOTAXnA91IV7HExDaIg:yzTSmvdcwb0VhXHlrTKA91IV7HExOIg

Malware Config

Targets

    • Target

      2024-08-03_1ed4f7087d455ac137f304bfa417def5_avoslocker_qakbot

    • Size

      1.2MB

    • MD5

      1ed4f7087d455ac137f304bfa417def5

    • SHA1

      c2f60d7c5bb26e297aff9118d3357b475272a96f

    • SHA256

      20f2746e7f5ce76ba65f0fdb57375ad5822942178f8eb940f6206d7ef982b408

    • SHA512

      b1b933ebc2edddb65cb28393258e09ab5e06c8de85f5dbb7144fb442f2540bff84b3da7f627d0dd4380df034d201affbdd90fabbacd4ce7769b05ad633b9ef8c

    • SSDEEP

      24576:yzd9Sm6s3SB4VbhzGcHb0bBhXxtyesOlU0YOTAXnA91IV7HExDaIg:yzTSmvdcwb0VhXHlrTKA91IV7HExOIg

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Uses Tor communications

      Malware can proxy its traffic through Tor for more anonymity.

MITRE ATT&CK Enterprise v15

Tasks