Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    38a1b6d3450929d69d2191e21d2f62f29e30a28f99e561121f8ca9b0cf299e56

  • Size

    70KB

  • Sample

    240824-hxtlfazhqp

  • MD5

    c758781ba663c7e3085b8199ffbf73f6

  • SHA1

    5d6eb6a4b7e17a1c9e736d332e1d8a9ea2859bb4

  • SHA256

    38a1b6d3450929d69d2191e21d2f62f29e30a28f99e561121f8ca9b0cf299e56

  • SHA512

    2b97b8671d36ecc074af9be048242f6dd206df0f48abe6dbdb017f5e2377eaaabeb66aaf7c5d43e152ba9937e777927e4ac40192bd03cab440a3ad0e724b8ac3

  • SSDEEP

    1536:/BqQesrz8VuJlMXaDuiN3riw+d9bHrkT5gUHz7FxtJ:/Bqi8ulMXaK4rBkfkT5xHzD

Malware Config

Targets

    • Target

      38a1b6d3450929d69d2191e21d2f62f29e30a28f99e561121f8ca9b0cf299e56

    • Size

      70KB

    • MD5

      c758781ba663c7e3085b8199ffbf73f6

    • SHA1

      5d6eb6a4b7e17a1c9e736d332e1d8a9ea2859bb4

    • SHA256

      38a1b6d3450929d69d2191e21d2f62f29e30a28f99e561121f8ca9b0cf299e56

    • SHA512

      2b97b8671d36ecc074af9be048242f6dd206df0f48abe6dbdb017f5e2377eaaabeb66aaf7c5d43e152ba9937e777927e4ac40192bd03cab440a3ad0e724b8ac3

    • SSDEEP

      1536:/BqQesrz8VuJlMXaDuiN3riw+d9bHrkT5gUHz7FxtJ:/Bqi8ulMXaK4rBkfkT5xHzD

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks