Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    06a4cab0ecb4ff77733e4d2ac8afb1e29eb0095c95ef189c72ff0dfc0840dc70

  • Size

    3.1MB

  • Sample

    240826-aqtc4atglf

  • MD5

    193c59d5f55ffe7043973efdd6b3ee26

  • SHA1

    854e5550f3207f8361dc46e7e3a1e1d744d503ad

  • SHA256

    06a4cab0ecb4ff77733e4d2ac8afb1e29eb0095c95ef189c72ff0dfc0840dc70

  • SHA512

    04ea4bcaadc85e6e86875bb47358dc2f06b6d0e5e6a4d722429fe522a49041c8d28345ad9cdc4708179f182b9113c2015accf67320d6a95cc846e4c304d7372f

  • SSDEEP

    98304:EAcRTd/kggQSwydThBmnXodHG+z92I0xkZV8zDzSC:WRTFkg3SwyhsXoRG+zAkZCzDz/

Malware Config

Targets

    • Target

      06a4cab0ecb4ff77733e4d2ac8afb1e29eb0095c95ef189c72ff0dfc0840dc70

    • Size

      3.1MB

    • MD5

      193c59d5f55ffe7043973efdd6b3ee26

    • SHA1

      854e5550f3207f8361dc46e7e3a1e1d744d503ad

    • SHA256

      06a4cab0ecb4ff77733e4d2ac8afb1e29eb0095c95ef189c72ff0dfc0840dc70

    • SHA512

      04ea4bcaadc85e6e86875bb47358dc2f06b6d0e5e6a4d722429fe522a49041c8d28345ad9cdc4708179f182b9113c2015accf67320d6a95cc846e4c304d7372f

    • SSDEEP

      98304:EAcRTd/kggQSwydThBmnXodHG+z92I0xkZV8zDzSC:WRTFkg3SwyhsXoRG+zAkZCzDz/

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks