Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    178783e3d8efecb9063a7d332234e8ab5f4e37fedf62bd1dcedc3d965af70240

  • Size

    2.6MB

  • Sample

    240921-2q24saycld

  • MD5

    403ff8a4d3292e19a5ebd03f062d2602

  • SHA1

    4f6f825636492e66ecd25b779c0a5d5dc1e2f089

  • SHA256

    178783e3d8efecb9063a7d332234e8ab5f4e37fedf62bd1dcedc3d965af70240

  • SHA512

    84eb63f10c7d73f677a077fd9169ab56cc173c15bdc2351e786e1528681d23429039fffe69ceb4ebfb5a663b387d4f01e5e67394f229f3213de74d43ce87d613

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBNB/bS:sxX7QnxrloE5dpUp+b

Malware Config

Targets

    • Target

      178783e3d8efecb9063a7d332234e8ab5f4e37fedf62bd1dcedc3d965af70240

    • Size

      2.6MB

    • MD5

      403ff8a4d3292e19a5ebd03f062d2602

    • SHA1

      4f6f825636492e66ecd25b779c0a5d5dc1e2f089

    • SHA256

      178783e3d8efecb9063a7d332234e8ab5f4e37fedf62bd1dcedc3d965af70240

    • SHA512

      84eb63f10c7d73f677a077fd9169ab56cc173c15bdc2351e786e1528681d23429039fffe69ceb4ebfb5a663b387d4f01e5e67394f229f3213de74d43ce87d613

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBNB/bS:sxX7QnxrloE5dpUp+b

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks