Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b6bb5bd8807e485caa7f73ab946e1e867e24816fd9f7b52f97024e7ea9ba2623N

  • Size

    1.9MB

  • Sample

    240921-2gbkgaxfqg

  • MD5

    db69c1814a3a1fa5032e4af31f54bf70

  • SHA1

    d6f0c8eb11311bb91d27b442df934837de091334

  • SHA256

    b6bb5bd8807e485caa7f73ab946e1e867e24816fd9f7b52f97024e7ea9ba2623

  • SHA512

    2fc1bce25cb31097481f45523bd1ae9ba94f8f7e0390a223cbf761ac2b7e6487ea4417109ac94cfd8148de30dfd4e89088c860ccacb782da8736f8b0fc28b5d6

  • SSDEEP

    49152:VjyKtQPJBnDxYZZG2XwhIBFxhqjeaNQ7epfOkxBQ1DW:9ntQPDW3G2XBFOeaNQ7MWkPAW

Malware Config

Targets

    • Target

      b6bb5bd8807e485caa7f73ab946e1e867e24816fd9f7b52f97024e7ea9ba2623N

    • Size

      1.9MB

    • MD5

      db69c1814a3a1fa5032e4af31f54bf70

    • SHA1

      d6f0c8eb11311bb91d27b442df934837de091334

    • SHA256

      b6bb5bd8807e485caa7f73ab946e1e867e24816fd9f7b52f97024e7ea9ba2623

    • SHA512

      2fc1bce25cb31097481f45523bd1ae9ba94f8f7e0390a223cbf761ac2b7e6487ea4417109ac94cfd8148de30dfd4e89088c860ccacb782da8736f8b0fc28b5d6

    • SSDEEP

      49152:VjyKtQPJBnDxYZZG2XwhIBFxhqjeaNQ7epfOkxBQ1DW:9ntQPDW3G2XBFOeaNQ7MWkPAW

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks