Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f62d085e06107ce329a5d835450341a0N

  • Size

    668KB

  • Sample

    240914-r94rlszfkh

  • MD5

    f62d085e06107ce329a5d835450341a0

  • SHA1

    6a87fb69bfb5b8feac2917e045c1050f3bf89a4a

  • SHA256

    37562391d980b641e9dbb4845749ad8d9f0df9eef1df50a3c08e7b578b7af38b

  • SHA512

    8beb387d1419086062bcf1493ee45f14db21ae0eca2f47acaa744c73fb0dff3c231ac74e9a5021bc94e11aa5dcccd9239d184d989b387d07673aadad3621e36c

  • SSDEEP

    12288:cSfSps28tL4l4Xzqs4f2S3heRW2ULNLw6VNCsJlgDaKAN:f0O0WX1rSxIW2oNxmYlgDaKAN

Malware Config

Targets

    • Target

      f62d085e06107ce329a5d835450341a0N

    • Size

      668KB

    • MD5

      f62d085e06107ce329a5d835450341a0

    • SHA1

      6a87fb69bfb5b8feac2917e045c1050f3bf89a4a

    • SHA256

      37562391d980b641e9dbb4845749ad8d9f0df9eef1df50a3c08e7b578b7af38b

    • SHA512

      8beb387d1419086062bcf1493ee45f14db21ae0eca2f47acaa744c73fb0dff3c231ac74e9a5021bc94e11aa5dcccd9239d184d989b387d07673aadad3621e36c

    • SSDEEP

      12288:cSfSps28tL4l4Xzqs4f2S3heRW2ULNLw6VNCsJlgDaKAN:f0O0WX1rSxIW2oNxmYlgDaKAN

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks