Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-08-12_b91746fe49fc89e8a28df14f0208b61d_bkransomware

  • Size

    1.3MB

  • Sample

    240812-let12aygqd

  • MD5

    b91746fe49fc89e8a28df14f0208b61d

  • SHA1

    396d22cc76cec1e938da3c9638a161a2830706a7

  • SHA256

    3e3c283626fb0a1c6cfe2025ebe7cdeab51c2f25c798b2a3c158c63bf6d562cf

  • SHA512

    b51f0eed07e3da2471946a5edf89e1e3d0ec7d189e197430accf418444a74a466d10c57a38bb9a6638ba221e7865d0e041bc60e42d92e8c56c45d6883a836fbc

  • SSDEEP

    12288:JtOw6BaXMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:76BTSkQ/7Gb8NLEbeZ

Malware Config

Targets

    • Target

      2024-08-12_b91746fe49fc89e8a28df14f0208b61d_bkransomware

    • Size

      1.3MB

    • MD5

      b91746fe49fc89e8a28df14f0208b61d

    • SHA1

      396d22cc76cec1e938da3c9638a161a2830706a7

    • SHA256

      3e3c283626fb0a1c6cfe2025ebe7cdeab51c2f25c798b2a3c158c63bf6d562cf

    • SHA512

      b51f0eed07e3da2471946a5edf89e1e3d0ec7d189e197430accf418444a74a466d10c57a38bb9a6638ba221e7865d0e041bc60e42d92e8c56c45d6883a836fbc

    • SSDEEP

      12288:JtOw6BaXMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:76BTSkQ/7Gb8NLEbeZ

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks