Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b7207a103ce1299e860599afb102e14690bb707c605ad5cc73e86165755a1039N

  • Size

    557KB

  • Sample

    240921-wgc6eavfne

  • MD5

    f9d3a56b68480206a6768e55dee2c010

  • SHA1

    1fb359d5d49acd58c64c12eadb73ce618a925ff4

  • SHA256

    b7207a103ce1299e860599afb102e14690bb707c605ad5cc73e86165755a1039

  • SHA512

    44c7613b25f653b6c14f140ccc470cef91804f9d2d6caf42bdcdb283571340a8e251f2f33cece2ec8eeb6edc305fafe8529e4450ce4a03bb02fac03a8692c5d4

  • SSDEEP

    6144:AhBqzw2w/0s/DbAgeonk7n7m8po+yUOKKNG0IxSjXKP+c:aqzw2wsEDbZ67fpLyUB/5qLc

Malware Config

Targets

    • Target

      b7207a103ce1299e860599afb102e14690bb707c605ad5cc73e86165755a1039N

    • Size

      557KB

    • MD5

      f9d3a56b68480206a6768e55dee2c010

    • SHA1

      1fb359d5d49acd58c64c12eadb73ce618a925ff4

    • SHA256

      b7207a103ce1299e860599afb102e14690bb707c605ad5cc73e86165755a1039

    • SHA512

      44c7613b25f653b6c14f140ccc470cef91804f9d2d6caf42bdcdb283571340a8e251f2f33cece2ec8eeb6edc305fafe8529e4450ce4a03bb02fac03a8692c5d4

    • SSDEEP

      6144:AhBqzw2w/0s/DbAgeonk7n7m8po+yUOKKNG0IxSjXKP+c:aqzw2wsEDbZ67fpLyUB/5qLc

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks