Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    66d58b1858bcb_crypted.exe

  • Size

    516KB

  • Sample

    240902-r5ksyasepq

  • MD5

    d8ecb462d3046a0ee172551c5d505c8e

  • SHA1

    54f9e16b497579964e9afc90c3c0c208f16b4418

  • SHA256

    afb9edbf499a4726d798cda9f0f372b4b1019033b68d5eb87a8a83ecb7463d6f

  • SHA512

    9eed44c24a71b44e90efc853b75d2103faa3f8518e1efad45c8c4733ee0396c51e8ea11ba6e7d2ac4f30234e6380c3325227cced8d1753373581eb45073c012e

  • SSDEEP

    12288:HiI9LiGtFBsoR1UJdFpzz0b+fzV4ULweVBBP0bK4WHL/Ff5qTkfozd:HieFBXRqJDpzE+LVfXVkbK4WlAvd

Malware Config

Targets

    • Target

      66d58b1858bcb_crypted.exe

    • Size

      516KB

    • MD5

      d8ecb462d3046a0ee172551c5d505c8e

    • SHA1

      54f9e16b497579964e9afc90c3c0c208f16b4418

    • SHA256

      afb9edbf499a4726d798cda9f0f372b4b1019033b68d5eb87a8a83ecb7463d6f

    • SHA512

      9eed44c24a71b44e90efc853b75d2103faa3f8518e1efad45c8c4733ee0396c51e8ea11ba6e7d2ac4f30234e6380c3325227cced8d1753373581eb45073c012e

    • SSDEEP

      12288:HiI9LiGtFBsoR1UJdFpzz0b+fzV4ULweVBBP0bK4WHL/Ff5qTkfozd:HieFBXRqJDpzE+LVfXVkbK4WlAvd

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks