Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4717-launcher-chitov-exloader-dlja-csgo.html

  • Size

    115KB

  • Sample

    240808-jc9mla1ejq

  • MD5

    ebf90155030d418463b9591e8ad08766

  • SHA1

    6acdb49a4920bfbe7512e5d769fa4fbfca187913

  • SHA256

    9dc65a16f168682603df569c91eafc899fd0f2b27baad2c781bf5e22e4182f15

  • SHA512

    8c4ffb61f9d2a838cfe98cfa12b3439a45e9045f38b912f371eacbabe73d15da2a5c93a3dfacc1882f656a4de5bb1ba4de0c9c6f4b3e1d0102c9a69bd83329fa

  • SSDEEP

    1536:BGlFByY8X4Ck05JlK2CoCxjBqoSU5PcMZs3vkWBu:BGlDygCk05JlK6KwGPcMoBu

Malware Config

Targets

    • Target

      4717-launcher-chitov-exloader-dlja-csgo.html

    • Size

      115KB

    • MD5

      ebf90155030d418463b9591e8ad08766

    • SHA1

      6acdb49a4920bfbe7512e5d769fa4fbfca187913

    • SHA256

      9dc65a16f168682603df569c91eafc899fd0f2b27baad2c781bf5e22e4182f15

    • SHA512

      8c4ffb61f9d2a838cfe98cfa12b3439a45e9045f38b912f371eacbabe73d15da2a5c93a3dfacc1882f656a4de5bb1ba4de0c9c6f4b3e1d0102c9a69bd83329fa

    • SSDEEP

      1536:BGlFByY8X4Ck05JlK2CoCxjBqoSU5PcMZs3vkWBu:BGlDygCk05JlK6KwGPcMoBu

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks