Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1e714f7fba6e7ef25f3c158e8e04caa0N.exe

  • Size

    1.4MB

  • Sample

    240814-fxar8axcqd

  • MD5

    1e714f7fba6e7ef25f3c158e8e04caa0

  • SHA1

    2e9cb5255f5840d2f2846cc5cfccb22ecb0672d0

  • SHA256

    e6232dc23c04efad4f0468f6d1c07ff215d200b6ddfc26ea986a168d6c950e3b

  • SHA512

    3ba7c2591b05551cbf1f56728466b265cbee9e0684a4d07b5eb0c7edfa2b4a8cd9b7e57f54babfab792738f11846375f83f7e5da9410ae7f371fba1549e026b7

  • SSDEEP

    24576:oWSqeWN422k2r1uOuJ4XqQbHgwC3fa2pW9yawBJm93zqOEH3YKEV6BAdRne5TO:VSqe2422kM1uOBLgwCC2w9yaw6qO2oKc

Malware Config

Targets

    • Target

      1e714f7fba6e7ef25f3c158e8e04caa0N.exe

    • Size

      1.4MB

    • MD5

      1e714f7fba6e7ef25f3c158e8e04caa0

    • SHA1

      2e9cb5255f5840d2f2846cc5cfccb22ecb0672d0

    • SHA256

      e6232dc23c04efad4f0468f6d1c07ff215d200b6ddfc26ea986a168d6c950e3b

    • SHA512

      3ba7c2591b05551cbf1f56728466b265cbee9e0684a4d07b5eb0c7edfa2b4a8cd9b7e57f54babfab792738f11846375f83f7e5da9410ae7f371fba1549e026b7

    • SSDEEP

      24576:oWSqeWN422k2r1uOuJ4XqQbHgwC3fa2pW9yawBJm93zqOEH3YKEV6BAdRne5TO:VSqe2422kM1uOBLgwCC2w9yaw6qO2oKc

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks