Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f942d5a62da02fb646574af0259c6c2f16d338370d004ab77f5d4f1b59f9cf1a

  • Size

    3.1MB

  • Sample

    240812-fs4vhawhrp

  • MD5

    cee03893acd8cf955d1e44ecbc0883bc

  • SHA1

    ca1c79c413e2196b192aac3544b9a7818327990d

  • SHA256

    f942d5a62da02fb646574af0259c6c2f16d338370d004ab77f5d4f1b59f9cf1a

  • SHA512

    fecdb2c44175cd591527a5c4613c01d82d80b71d2570fb138704454cf104344ed7748f93747cd621101f2d40521982aa93ed00a8a5002fc8f8900b8f7bc4b769

  • SSDEEP

    49152:m4HMa/zj/VS5cw2ip+RhItw9lq26rWYNSm3Q74cJOJCuDRsv+RN9vzvWLpW:x3bjdS5RAYtK4xlSm3s7OHy+9vzu9

Malware Config

Targets

    • Target

      f942d5a62da02fb646574af0259c6c2f16d338370d004ab77f5d4f1b59f9cf1a

    • Size

      3.1MB

    • MD5

      cee03893acd8cf955d1e44ecbc0883bc

    • SHA1

      ca1c79c413e2196b192aac3544b9a7818327990d

    • SHA256

      f942d5a62da02fb646574af0259c6c2f16d338370d004ab77f5d4f1b59f9cf1a

    • SHA512

      fecdb2c44175cd591527a5c4613c01d82d80b71d2570fb138704454cf104344ed7748f93747cd621101f2d40521982aa93ed00a8a5002fc8f8900b8f7bc4b769

    • SSDEEP

      49152:m4HMa/zj/VS5cw2ip+RhItw9lq26rWYNSm3Q74cJOJCuDRsv+RN9vzvWLpW:x3bjdS5RAYtK4xlSm3s7OHy+9vzu9

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks