Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    af6cf529b58b24e3ffb4fea5dccc8c50N.exe

  • Size

    3.0MB

  • Sample

    240820-m5qxqsxgqg

  • MD5

    af6cf529b58b24e3ffb4fea5dccc8c50

  • SHA1

    df69c48d5927c343d2f16117057f14431a34a01c

  • SHA256

    d3466137e0217a6a722469f241f8b75540c9239665bf31404cc3c41fb4f989ca

  • SHA512

    14db2ea9f7cab422b9eef482d260e5f3e90ad093c45c148131acc73a8100a154554b6114b74140c751fcda11edd3c1ccaf34d7629bd2704c42924c548cd37025

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBeB/bSqz8b6LNX:sxX7QnxrloE5dpUp1bVz8eLF

Malware Config

Targets

    • Target

      af6cf529b58b24e3ffb4fea5dccc8c50N.exe

    • Size

      3.0MB

    • MD5

      af6cf529b58b24e3ffb4fea5dccc8c50

    • SHA1

      df69c48d5927c343d2f16117057f14431a34a01c

    • SHA256

      d3466137e0217a6a722469f241f8b75540c9239665bf31404cc3c41fb4f989ca

    • SHA512

      14db2ea9f7cab422b9eef482d260e5f3e90ad093c45c148131acc73a8100a154554b6114b74140c751fcda11edd3c1ccaf34d7629bd2704c42924c548cd37025

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBeB/bSqz8b6LNX:sxX7QnxrloE5dpUp1bVz8eLF

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks