Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    37fb6c44c5dc088dc5b54be3fdfdc6e91ea90ed4d125f0d2e532f72733912fe1N

  • Size

    725KB

  • Sample

    241025-zjwmbaslfs

  • MD5

    61405ad02deb547ef8b44b6679850550

  • SHA1

    dbf242be795317db5b3f99fa530c712286b01f4a

  • SHA256

    37fb6c44c5dc088dc5b54be3fdfdc6e91ea90ed4d125f0d2e532f72733912fe1

  • SHA512

    b946d7db06d3ef7d23f8ccfe27a840371a085e03077cddec1f85e2da895c4ac6ae115f0f16beceef04d53be754ed5b65f600f4e6d674aaef7305540a2f3eb1cc

  • SSDEEP

    12288:h1OgLdaOwo99/rsFEt5hDG0SAMs9jR/jeRJKu9TJdwYGZtyjTje5jOSpJf:h1OYdaOwOBsFEt5hDG0SAMs9jR/jaJnM

Malware Config

Targets

    • Target

      37fb6c44c5dc088dc5b54be3fdfdc6e91ea90ed4d125f0d2e532f72733912fe1N

    • Size

      725KB

    • MD5

      61405ad02deb547ef8b44b6679850550

    • SHA1

      dbf242be795317db5b3f99fa530c712286b01f4a

    • SHA256

      37fb6c44c5dc088dc5b54be3fdfdc6e91ea90ed4d125f0d2e532f72733912fe1

    • SHA512

      b946d7db06d3ef7d23f8ccfe27a840371a085e03077cddec1f85e2da895c4ac6ae115f0f16beceef04d53be754ed5b65f600f4e6d674aaef7305540a2f3eb1cc

    • SSDEEP

      12288:h1OgLdaOwo99/rsFEt5hDG0SAMs9jR/jeRJKu9TJdwYGZtyjTje5jOSpJf:h1OYdaOwOBsFEt5hDG0SAMs9jR/jaJnM

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks