Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0407b4435298fd6accedf181a003a74b7abd31a879bbaab0b57c61fc4d89e02c

  • Size

    577KB

  • Sample

    241018-ah5q6axemn

  • MD5

    2594548b32cc51cf2f9d32033cbff157

  • SHA1

    0a2f78755c0fe25d1729d1bc38be80617aa16e38

  • SHA256

    0407b4435298fd6accedf181a003a74b7abd31a879bbaab0b57c61fc4d89e02c

  • SHA512

    7a5a798b2166a4f7ecf1b12efc0dfb536694255fa1aa8fb5779b7adb21a15d01865a230752a0ef5804a52101bac654c9c0ac8ae223d834509a67a11cdcb03f69

  • SSDEEP

    6144:Z13TE7cV3iwbAFRWAbd4nf0H05yqE6Hl0ChW0+ksllAXBu0lWGWUJJQ4t0BHQQfu:Z13A7a3iwbihym2g7XO3LWUQfh4Co

Malware Config

Targets

    • Target

      0407b4435298fd6accedf181a003a74b7abd31a879bbaab0b57c61fc4d89e02c

    • Size

      577KB

    • MD5

      2594548b32cc51cf2f9d32033cbff157

    • SHA1

      0a2f78755c0fe25d1729d1bc38be80617aa16e38

    • SHA256

      0407b4435298fd6accedf181a003a74b7abd31a879bbaab0b57c61fc4d89e02c

    • SHA512

      7a5a798b2166a4f7ecf1b12efc0dfb536694255fa1aa8fb5779b7adb21a15d01865a230752a0ef5804a52101bac654c9c0ac8ae223d834509a67a11cdcb03f69

    • SSDEEP

      6144:Z13TE7cV3iwbAFRWAbd4nf0H05yqE6Hl0ChW0+ksllAXBu0lWGWUJJQ4t0BHQQfu:Z13A7a3iwbihym2g7XO3LWUQfh4Co

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks