Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    263d293e9ad948b14593f529d9f193f0N.exe

  • Size

    3.2MB

  • Sample

    240805-3q2cxssdqk

  • MD5

    263d293e9ad948b14593f529d9f193f0

  • SHA1

    32f62e6829fb5806934211670c6037171c1f8af0

  • SHA256

    db151a1e2834e88938eecd6986efae314b497137d976d81a216673298fe06100

  • SHA512

    08326a83c40030a73a90a98b8b48ecfc1eecc99a35e37339acd30ac92e0cf5f22d44d3c8b3a9c9319d38375c50eaa3128c43466a51a869b4d98dd343a5d06794

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB7B/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpwbVz8eLFcz

Malware Config

Targets

    • Target

      263d293e9ad948b14593f529d9f193f0N.exe

    • Size

      3.2MB

    • MD5

      263d293e9ad948b14593f529d9f193f0

    • SHA1

      32f62e6829fb5806934211670c6037171c1f8af0

    • SHA256

      db151a1e2834e88938eecd6986efae314b497137d976d81a216673298fe06100

    • SHA512

      08326a83c40030a73a90a98b8b48ecfc1eecc99a35e37339acd30ac92e0cf5f22d44d3c8b3a9c9319d38375c50eaa3128c43466a51a869b4d98dd343a5d06794

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB7B/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpwbVz8eLFcz

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks