Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    00f9cccfed0cd0b6e88e64a78456a5c6bd30e53a6b2af847626ccebf587e620b

  • Size

    1.8MB

  • Sample

    240912-kvhghazepf

  • MD5

    480e12904ff026ef1091217a8eaf9327

  • SHA1

    1df11455e02e630b9e7c1a7a0b9f5d28c789a0e9

  • SHA256

    00f9cccfed0cd0b6e88e64a78456a5c6bd30e53a6b2af847626ccebf587e620b

  • SHA512

    fe1d5a513eaa692600c831e1c2d97b216978fce0a2f93ee5ee56b0f828fabb20815032e79521f2faad8bb9c0e7cd254d100d48f650c6f43be18260c9f878599a

  • SSDEEP

    49152:BM9QPdxwfE7WlFwKAfzuTiDFUFkdCks7R9L58UqFJjskU:B1PdVQFwKZCFgYC17DVqFJU

Malware Config

Targets

    • Target

      00f9cccfed0cd0b6e88e64a78456a5c6bd30e53a6b2af847626ccebf587e620b

    • Size

      1.8MB

    • MD5

      480e12904ff026ef1091217a8eaf9327

    • SHA1

      1df11455e02e630b9e7c1a7a0b9f5d28c789a0e9

    • SHA256

      00f9cccfed0cd0b6e88e64a78456a5c6bd30e53a6b2af847626ccebf587e620b

    • SHA512

      fe1d5a513eaa692600c831e1c2d97b216978fce0a2f93ee5ee56b0f828fabb20815032e79521f2faad8bb9c0e7cd254d100d48f650c6f43be18260c9f878599a

    • SSDEEP

      49152:BM9QPdxwfE7WlFwKAfzuTiDFUFkdCks7R9L58UqFJjskU:B1PdVQFwKZCFgYC17DVqFJU

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks