Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    dd0352b5b9939c717ef938e0e0d3502bdd2aca64bf5151ef72893532097b897a

  • Size

    2.0MB

  • Sample

    240820-a823ysyhkn

  • MD5

    800075f86c504ca0c1dd8184ff2dde0b

  • SHA1

    8e956ded8cd73a25bce7b03d572989d1a1360cbd

  • SHA256

    dd0352b5b9939c717ef938e0e0d3502bdd2aca64bf5151ef72893532097b897a

  • SHA512

    94a52539237f8d2576d4e6be878da6015a2dd98b99a2f1ae4a894db0c52bbecc520fb3a8d8fbc92d9ee04922188e2c5e1e7637bffd7f03ebe6a5e500f5ad8eba

  • SSDEEP

    49152:rVAbwuGwKOco09gsJcxlV8fTguPOAItUIrhO5Ov:BApQx5+Mc27g9tfoMv

Malware Config

Targets

    • Target

      dd0352b5b9939c717ef938e0e0d3502bdd2aca64bf5151ef72893532097b897a

    • Size

      2.0MB

    • MD5

      800075f86c504ca0c1dd8184ff2dde0b

    • SHA1

      8e956ded8cd73a25bce7b03d572989d1a1360cbd

    • SHA256

      dd0352b5b9939c717ef938e0e0d3502bdd2aca64bf5151ef72893532097b897a

    • SHA512

      94a52539237f8d2576d4e6be878da6015a2dd98b99a2f1ae4a894db0c52bbecc520fb3a8d8fbc92d9ee04922188e2c5e1e7637bffd7f03ebe6a5e500f5ad8eba

    • SSDEEP

      49152:rVAbwuGwKOco09gsJcxlV8fTguPOAItUIrhO5Ov:BApQx5+Mc27g9tfoMv

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks