Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2b992dbb3e1520f201b49cad00f0b44d3e3824a09d4e15cce81e9a2b4362b72d

  • Size

    491KB

  • Sample

    240813-yb7h6sxbnl

  • MD5

    65dd19564cf8d9136999784be998dffc

  • SHA1

    923b2520746c20ba98d0c47d273cb52a1c76a59c

  • SHA256

    2b992dbb3e1520f201b49cad00f0b44d3e3824a09d4e15cce81e9a2b4362b72d

  • SHA512

    7a1bd7162258a2c4d49569f2134242b9e271b9a53962c3954988925d777a5f05bb64fe59d727c4169403c32e3279b9bfb2d1871db85c21c3348a38f65245752e

  • SSDEEP

    12288:J21quIf1gL5pRTcAkS/3hzN8qE43fm78V:s1q45jcAkSYqyE

Malware Config

Targets

    • Target

      2b992dbb3e1520f201b49cad00f0b44d3e3824a09d4e15cce81e9a2b4362b72d

    • Size

      491KB

    • MD5

      65dd19564cf8d9136999784be998dffc

    • SHA1

      923b2520746c20ba98d0c47d273cb52a1c76a59c

    • SHA256

      2b992dbb3e1520f201b49cad00f0b44d3e3824a09d4e15cce81e9a2b4362b72d

    • SHA512

      7a1bd7162258a2c4d49569f2134242b9e271b9a53962c3954988925d777a5f05bb64fe59d727c4169403c32e3279b9bfb2d1871db85c21c3348a38f65245752e

    • SSDEEP

      12288:J21quIf1gL5pRTcAkS/3hzN8qE43fm78V:s1q45jcAkSYqyE

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks