Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ac2ceb406050dda76980b2079833cbbab8d132b45dff321ba510b73de1ba7d2e

  • Size

    2.0MB

  • Sample

    240818-byzqhs1cnp

  • MD5

    d4587ca1ebf618f2ae0124c51a1a2177

  • SHA1

    4432692f89d59a89780010bf06ab4d630d67bb74

  • SHA256

    ac2ceb406050dda76980b2079833cbbab8d132b45dff321ba510b73de1ba7d2e

  • SHA512

    954f4196f41a12431ccef69a081e98b93422bd5cfd3b31310ee4d5059779a4bf5ea20ce48157921b6f93f5b02d843e0241f69530d1aecddb72a2d712a5afcb50

  • SSDEEP

    49152:GVAbwuGwKOco09gsJcxlV8fTguPOAItUIrhO5Ov:CApQx5+Mc27g9tfoMv

Malware Config

Targets

    • Target

      ac2ceb406050dda76980b2079833cbbab8d132b45dff321ba510b73de1ba7d2e

    • Size

      2.0MB

    • MD5

      d4587ca1ebf618f2ae0124c51a1a2177

    • SHA1

      4432692f89d59a89780010bf06ab4d630d67bb74

    • SHA256

      ac2ceb406050dda76980b2079833cbbab8d132b45dff321ba510b73de1ba7d2e

    • SHA512

      954f4196f41a12431ccef69a081e98b93422bd5cfd3b31310ee4d5059779a4bf5ea20ce48157921b6f93f5b02d843e0241f69530d1aecddb72a2d712a5afcb50

    • SSDEEP

      49152:GVAbwuGwKOco09gsJcxlV8fTguPOAItUIrhO5Ov:CApQx5+Mc27g9tfoMv

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks