Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5b83d16ceb4c4f2370ab149a03b9fd30N

  • Size

    2.6MB

  • Sample

    240907-3jce8atfjg

  • MD5

    5b83d16ceb4c4f2370ab149a03b9fd30

  • SHA1

    cee1c2bd9cad74586ba6361056b601b64c007853

  • SHA256

    96a85e08e98db6fcb940eca6b695bd9a41bcfcdd0d620b31de4a8f35d22ae0c4

  • SHA512

    3cc10d8be306e9ff9bd000994b889b4fa1e01c3df4f3d273445501fe7e11733df5c1fc02eb4ec4f6e1e2547d5c3db143053471ddf60866b9eeaa2254cbedda0d

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBHB/bS:sxX7QnxrloE5dpUpEb

Malware Config

Targets

    • Target

      5b83d16ceb4c4f2370ab149a03b9fd30N

    • Size

      2.6MB

    • MD5

      5b83d16ceb4c4f2370ab149a03b9fd30

    • SHA1

      cee1c2bd9cad74586ba6361056b601b64c007853

    • SHA256

      96a85e08e98db6fcb940eca6b695bd9a41bcfcdd0d620b31de4a8f35d22ae0c4

    • SHA512

      3cc10d8be306e9ff9bd000994b889b4fa1e01c3df4f3d273445501fe7e11733df5c1fc02eb4ec4f6e1e2547d5c3db143053471ddf60866b9eeaa2254cbedda0d

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBHB/bS:sxX7QnxrloE5dpUpEb

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks