Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b7da66a18e8a265e5a63796f7584fdc6564d805c1af8e04cbb3eff6c3b2cb7c5

  • Size

    5.1MB

  • Sample

    240808-hvl4ks1cnj

  • MD5

    12437ef6de9ccda2303cfb6b0d38c2b6

  • SHA1

    df64e2bc7809a543fbde1b225176736b49e6fbe2

  • SHA256

    b7da66a18e8a265e5a63796f7584fdc6564d805c1af8e04cbb3eff6c3b2cb7c5

  • SHA512

    3f14cb200e5da8973aa6972e9533c453657dcd52bd5a76b9394a2b01291e691ef61d2c13998a5ee032483d6c9e5cbbe052ab8675b7b85a38cad7ed8fd42cea64

  • SSDEEP

    98304:z0NFA6666666666666666666666666666666x666666666666666fwwwwwwwwwwV:hPMki6zio75L3pf3dedO4keCIwkoYbg1

Malware Config

Targets

    • Target

      b7da66a18e8a265e5a63796f7584fdc6564d805c1af8e04cbb3eff6c3b2cb7c5

    • Size

      5.1MB

    • MD5

      12437ef6de9ccda2303cfb6b0d38c2b6

    • SHA1

      df64e2bc7809a543fbde1b225176736b49e6fbe2

    • SHA256

      b7da66a18e8a265e5a63796f7584fdc6564d805c1af8e04cbb3eff6c3b2cb7c5

    • SHA512

      3f14cb200e5da8973aa6972e9533c453657dcd52bd5a76b9394a2b01291e691ef61d2c13998a5ee032483d6c9e5cbbe052ab8675b7b85a38cad7ed8fd42cea64

    • SSDEEP

      98304:z0NFA6666666666666666666666666666666x666666666666666fwwwwwwwwwwV:hPMki6zio75L3pf3dedO4keCIwkoYbg1

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks