Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NitroBoostGen24.exe

  • Size

    23.5MB

  • Sample

    241011-ze679asfkh

  • MD5

    3d616d8ba8411a4b431b8bba0adc1ef3

  • SHA1

    2599930bd8518815ce081b86d72dfbc8fcf61d86

  • SHA256

    0a7aa8f6bfea8d0ba1b452e540352a132ff7be02cfd7f9f2b7eb9e01fcad7520

  • SHA512

    744e61ebaa4079d0ce5735dde1f50333f448f96a318a387a1121e21860ddc77cfac5908fb3b370dff5598329cd2317779d9571c8a6dff2943df33958a765d089

  • SSDEEP

    393216:pa92Yg5BHtSTurEUWjE+8PvIxjDTVggMHDDgSezga6yWH9SFPTw6xG:s9SVGdbE+KvIFVOj0Sezgak9SFPJ8

Malware Config

Targets

    • Target

      NitroBoostGen24.exe

    • Size

      23.5MB

    • MD5

      3d616d8ba8411a4b431b8bba0adc1ef3

    • SHA1

      2599930bd8518815ce081b86d72dfbc8fcf61d86

    • SHA256

      0a7aa8f6bfea8d0ba1b452e540352a132ff7be02cfd7f9f2b7eb9e01fcad7520

    • SHA512

      744e61ebaa4079d0ce5735dde1f50333f448f96a318a387a1121e21860ddc77cfac5908fb3b370dff5598329cd2317779d9571c8a6dff2943df33958a765d089

    • SSDEEP

      393216:pa92Yg5BHtSTurEUWjE+8PvIxjDTVggMHDDgSezga6yWH9SFPTw6xG:s9SVGdbE+KvIFVOj0Sezgak9SFPJ8

    • Cats the Freakster

      my daddy freakster was mentioned in this file 🥵

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks