Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3ee4a118b3b699ef39b39eccd067721ce3107b5688303a597040f2b177ac5044

  • Size

    2.6MB

  • Sample

    241027-11yzfateja

  • MD5

    2e49345ec0e25de1293f292fab9875cd

  • SHA1

    10ca3c9b6ea894ed00ce64d88f89cfb72b4fb5a0

  • SHA256

    3ee4a118b3b699ef39b39eccd067721ce3107b5688303a597040f2b177ac5044

  • SHA512

    4ae2878491d7a5b33e562d0523b943bf2dc7e266b95e2602968b85626d3aa47fabf17bb76c3fee779b318e90a4b0e61581e092fdacb1c8163131676eee451464

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBNB/bS:sxX7QnxrloE5dpUp6b

Malware Config

Targets

    • Target

      3ee4a118b3b699ef39b39eccd067721ce3107b5688303a597040f2b177ac5044

    • Size

      2.6MB

    • MD5

      2e49345ec0e25de1293f292fab9875cd

    • SHA1

      10ca3c9b6ea894ed00ce64d88f89cfb72b4fb5a0

    • SHA256

      3ee4a118b3b699ef39b39eccd067721ce3107b5688303a597040f2b177ac5044

    • SHA512

      4ae2878491d7a5b33e562d0523b943bf2dc7e266b95e2602968b85626d3aa47fabf17bb76c3fee779b318e90a4b0e61581e092fdacb1c8163131676eee451464

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBNB/bS:sxX7QnxrloE5dpUp6b

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks