Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    855dcca669144d13c8b07ea5bbfd6760N.exe

  • Size

    2.6MB

  • Sample

    240907-b6nm8ayfkm

  • MD5

    855dcca669144d13c8b07ea5bbfd6760

  • SHA1

    0d0350a79c13baacdf1bbf05ffdf0573692a45fc

  • SHA256

    cb709e197edd5aaaeb940f757f8bb7e23a0b1e11d5e34561200b38635b0bddea

  • SHA512

    81053959908c5d6b20f21cbd2063c9017cc4b4af1a8065b9a150bf87f4a8d4e0e010321621dc6ac09863f1f38778c6fcb30be32432a6403982661a54fef7036f

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB2B/bS:sxX7QnxrloE5dpUpdb

Malware Config

Targets

    • Target

      855dcca669144d13c8b07ea5bbfd6760N.exe

    • Size

      2.6MB

    • MD5

      855dcca669144d13c8b07ea5bbfd6760

    • SHA1

      0d0350a79c13baacdf1bbf05ffdf0573692a45fc

    • SHA256

      cb709e197edd5aaaeb940f757f8bb7e23a0b1e11d5e34561200b38635b0bddea

    • SHA512

      81053959908c5d6b20f21cbd2063c9017cc4b4af1a8065b9a150bf87f4a8d4e0e010321621dc6ac09863f1f38778c6fcb30be32432a6403982661a54fef7036f

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB2B/bS:sxX7QnxrloE5dpUpdb

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks