Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0ea67812c8d7c2fced136a23b4cacc8b41c7949575b679829e1a998dc2b7a531N

  • Size

    2.6MB

  • Sample

    241014-tp7nwaxgln

  • MD5

    9267f952a13dabe9573df2e86e259ae0

  • SHA1

    4c840b73b84a96f569969d55892e05d97b868884

  • SHA256

    0ea67812c8d7c2fced136a23b4cacc8b41c7949575b679829e1a998dc2b7a531

  • SHA512

    8bb9393e1885c86ac39556188c7be4bac26d9395124556d83cb37b1d0a9b1d216c2dd9c593ac5f4de7ea18d52615b894319fe1a0ba611337152c06929b10da2c

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBZB/bS:sxX7QnxrloE5dpUpWb

Malware Config

Targets

    • Target

      0ea67812c8d7c2fced136a23b4cacc8b41c7949575b679829e1a998dc2b7a531N

    • Size

      2.6MB

    • MD5

      9267f952a13dabe9573df2e86e259ae0

    • SHA1

      4c840b73b84a96f569969d55892e05d97b868884

    • SHA256

      0ea67812c8d7c2fced136a23b4cacc8b41c7949575b679829e1a998dc2b7a531

    • SHA512

      8bb9393e1885c86ac39556188c7be4bac26d9395124556d83cb37b1d0a9b1d216c2dd9c593ac5f4de7ea18d52615b894319fe1a0ba611337152c06929b10da2c

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBZB/bS:sxX7QnxrloE5dpUpWb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks