Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-08-24_129ea9ff225d7ec1f8b1378d31aae6c5_bkransomware

  • Size

    2.3MB

  • Sample

    240824-pksxps1gnp

  • MD5

    129ea9ff225d7ec1f8b1378d31aae6c5

  • SHA1

    5305a7a803a5a597ebf298fb1f725e62c2938a7e

  • SHA256

    901cd1d56c07f1183e764ab2ecc299c680b4bebd7b3fff6149c7ae56ab72da98

  • SHA512

    d4714a80d147a264895fcc6e2ebea1a10b5cab6242d8df8e157c4602058c0c9e061058eecf97393d8503ccb2d0418300ca215c09b209e1d8a923f38433e0c20c

  • SSDEEP

    49152:Lf3ZoG3UCj5qzWt2skmzb2R3NBHCYcMpCqy+Xy9mp6IiAQgAT76sQuE:jZP3UCj50WtQwb2R3N9cMpCqy+XZqGs+

Malware Config

Targets

    • Target

      2024-08-24_129ea9ff225d7ec1f8b1378d31aae6c5_bkransomware

    • Size

      2.3MB

    • MD5

      129ea9ff225d7ec1f8b1378d31aae6c5

    • SHA1

      5305a7a803a5a597ebf298fb1f725e62c2938a7e

    • SHA256

      901cd1d56c07f1183e764ab2ecc299c680b4bebd7b3fff6149c7ae56ab72da98

    • SHA512

      d4714a80d147a264895fcc6e2ebea1a10b5cab6242d8df8e157c4602058c0c9e061058eecf97393d8503ccb2d0418300ca215c09b209e1d8a923f38433e0c20c

    • SSDEEP

      49152:Lf3ZoG3UCj5qzWt2skmzb2R3NBHCYcMpCqy+Xy9mp6IiAQgAT76sQuE:jZP3UCj50WtQwb2R3N9cMpCqy+XZqGs+

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks