Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    295ef7779614beae1ec9f71d8110881ca99a4fe43631cb730fd0cebedbef0b32

  • Size

    2.6MB

  • Sample

    240806-yplhvsseje

  • MD5

    d26b5adb1b5ea2d0fa196ec3b837a355

  • SHA1

    9e7cd4f04c060c64d7773812b662dbeba3148b32

  • SHA256

    295ef7779614beae1ec9f71d8110881ca99a4fe43631cb730fd0cebedbef0b32

  • SHA512

    680a5265895eff8a09e9e3ebb7f70fc4d2d8a0fb07e48eafe869ceaf7c9bb5612e5a6614888d1eeade03b39d69016aa2139b239d18369df55293b90f82836c47

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB0B/bS:sxX7QnxrloE5dpUp7b

Malware Config

Targets

    • Target

      295ef7779614beae1ec9f71d8110881ca99a4fe43631cb730fd0cebedbef0b32

    • Size

      2.6MB

    • MD5

      d26b5adb1b5ea2d0fa196ec3b837a355

    • SHA1

      9e7cd4f04c060c64d7773812b662dbeba3148b32

    • SHA256

      295ef7779614beae1ec9f71d8110881ca99a4fe43631cb730fd0cebedbef0b32

    • SHA512

      680a5265895eff8a09e9e3ebb7f70fc4d2d8a0fb07e48eafe869ceaf7c9bb5612e5a6614888d1eeade03b39d69016aa2139b239d18369df55293b90f82836c47

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB0B/bS:sxX7QnxrloE5dpUp7b

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks