Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    548be8b074415e8bb93f69a3b0f0c269ef82b7fb98f148d6cf6179809e10bc36N

  • Size

    2.6MB

  • Sample

    240928-yhglbswejg

  • MD5

    becef067a84724f23bd4d4697203c4d0

  • SHA1

    ceae1f1da1519238f2939c87d757ae4bec2973eb

  • SHA256

    548be8b074415e8bb93f69a3b0f0c269ef82b7fb98f148d6cf6179809e10bc36

  • SHA512

    b15e65f7561759f74169e4d59058e22453db2094e7d63f8a0318f146eb378ab5f5c10626c52db5bf66f0fbba0f0ec2f0804b6fc131eea3b00d290ae3620100c9

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBDB/bS:sxX7QnxrloE5dpUpkb

Malware Config

Targets

    • Target

      548be8b074415e8bb93f69a3b0f0c269ef82b7fb98f148d6cf6179809e10bc36N

    • Size

      2.6MB

    • MD5

      becef067a84724f23bd4d4697203c4d0

    • SHA1

      ceae1f1da1519238f2939c87d757ae4bec2973eb

    • SHA256

      548be8b074415e8bb93f69a3b0f0c269ef82b7fb98f148d6cf6179809e10bc36

    • SHA512

      b15e65f7561759f74169e4d59058e22453db2094e7d63f8a0318f146eb378ab5f5c10626c52db5bf66f0fbba0f0ec2f0804b6fc131eea3b00d290ae3620100c9

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBDB/bS:sxX7QnxrloE5dpUpkb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks