Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a5ade64362442929ca1805bedb8e50530bb2790e46bd0aa4c6e4805728325466.exe

  • Size

    1.8MB

  • Sample

    240807-ccmdqsxfln

  • MD5

    ed34b680cf2b4103d23428eb4b766855

  • SHA1

    fc86edf6657ac81d58d1612de7088cc0bd60ce87

  • SHA256

    a5ade64362442929ca1805bedb8e50530bb2790e46bd0aa4c6e4805728325466

  • SHA512

    ee70154b74872c3f0c11a59c58def5bd8133e3157ccf39903bb28e35c4c96847678ae489c4e7be174b0ca597ca809b97de6b48eb1189d51b32300b91baeed85c

  • SSDEEP

    24576:jdFIeHFlGYDAnNQu49sfO+sKK/kMyRZybL0oDMXLHFkY07Vr68KZ:jAyXUGu490TR44XrT07Vr0Z

Malware Config

Targets

    • Target

      a5ade64362442929ca1805bedb8e50530bb2790e46bd0aa4c6e4805728325466.exe

    • Size

      1.8MB

    • MD5

      ed34b680cf2b4103d23428eb4b766855

    • SHA1

      fc86edf6657ac81d58d1612de7088cc0bd60ce87

    • SHA256

      a5ade64362442929ca1805bedb8e50530bb2790e46bd0aa4c6e4805728325466

    • SHA512

      ee70154b74872c3f0c11a59c58def5bd8133e3157ccf39903bb28e35c4c96847678ae489c4e7be174b0ca597ca809b97de6b48eb1189d51b32300b91baeed85c

    • SSDEEP

      24576:jdFIeHFlGYDAnNQu49sfO+sKK/kMyRZybL0oDMXLHFkY07Vr68KZ:jAyXUGu490TR44XrT07Vr0Z

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks