Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d8a781ea016e33f481fbc1c4f9fcc933a1a72bd2f379fb9ed30639b94b00c5fc

  • Size

    2.0MB

  • Sample

    240809-cccvasvcqk

  • MD5

    d4ff44ead2dde7155c7f9a806c74251b

  • SHA1

    e84771aa2df83734347230a579917e57291e27dd

  • SHA256

    d8a781ea016e33f481fbc1c4f9fcc933a1a72bd2f379fb9ed30639b94b00c5fc

  • SHA512

    bed6297ef908558d8f045a1cc9a5fe5408053d174dddf79d29fb2f59f904e2b80165e2f41484e5ae0b81784ec17640e2498b9e1a2125a3b50bea17a0bd275466

  • SSDEEP

    49152:fVAbwuGwKOco09gsJcxlV8fTguPOAItUIrhO5Ov:dApQx5+Mc27g9tfoMv

Malware Config

Targets

    • Target

      d8a781ea016e33f481fbc1c4f9fcc933a1a72bd2f379fb9ed30639b94b00c5fc

    • Size

      2.0MB

    • MD5

      d4ff44ead2dde7155c7f9a806c74251b

    • SHA1

      e84771aa2df83734347230a579917e57291e27dd

    • SHA256

      d8a781ea016e33f481fbc1c4f9fcc933a1a72bd2f379fb9ed30639b94b00c5fc

    • SHA512

      bed6297ef908558d8f045a1cc9a5fe5408053d174dddf79d29fb2f59f904e2b80165e2f41484e5ae0b81784ec17640e2498b9e1a2125a3b50bea17a0bd275466

    • SSDEEP

      49152:fVAbwuGwKOco09gsJcxlV8fTguPOAItUIrhO5Ov:dApQx5+Mc27g9tfoMv

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks