Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4273526b35f9ea94c433a68ea08f3c90N.exe

  • Size

    1.7MB

  • Sample

    240905-wwdqgswgpp

  • MD5

    4273526b35f9ea94c433a68ea08f3c90

  • SHA1

    da30ac5c2d1e66ea4bb7ab1124797d60f521f22c

  • SHA256

    04b24bf46d926afcee574593c069360812e77fbc32efd0cdab14658fe7b33c31

  • SHA512

    6caf56e2634e6e78add55b86f03ed9a179d263485394543b003b5ff3e0711625555652d44af09804780db9f17dc4487c77b1bb582970a789dd5ae94bcd669c04

  • SSDEEP

    49152:YZ6zY8/7WDaDvfd5iQ8zoBTdoj9kQ/qoLEw:xzY8zWDaDHiQ8QTdojdqo4w

Malware Config

Targets

    • Target

      4273526b35f9ea94c433a68ea08f3c90N.exe

    • Size

      1.7MB

    • MD5

      4273526b35f9ea94c433a68ea08f3c90

    • SHA1

      da30ac5c2d1e66ea4bb7ab1124797d60f521f22c

    • SHA256

      04b24bf46d926afcee574593c069360812e77fbc32efd0cdab14658fe7b33c31

    • SHA512

      6caf56e2634e6e78add55b86f03ed9a179d263485394543b003b5ff3e0711625555652d44af09804780db9f17dc4487c77b1bb582970a789dd5ae94bcd669c04

    • SSDEEP

      49152:YZ6zY8/7WDaDvfd5iQ8zoBTdoj9kQ/qoLEw:xzY8zWDaDHiQ8QTdojdqo4w

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks