Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4a41c3a60f9f570a47904e81883e69fe6224f71bd7ce856808eac0d1c4033524

  • Size

    2.6MB

  • Sample

    241027-2rk7navaqd

  • MD5

    254d513b097d05bc6af694aa5bbb4fbe

  • SHA1

    19b092047aaf8ed3a91986d6a7e04ee07377c368

  • SHA256

    4a41c3a60f9f570a47904e81883e69fe6224f71bd7ce856808eac0d1c4033524

  • SHA512

    afc69bef6a63ea54dd4f0b05dca02503da5cb348c8980b66d83ad3076acc84c09733f66d69576533cb93240d989c38ac9a5dd26c6ae0214935399daeca29fcde

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBJB/bS:sxX7QnxrloE5dpUpmb

Malware Config

Targets

    • Target

      4a41c3a60f9f570a47904e81883e69fe6224f71bd7ce856808eac0d1c4033524

    • Size

      2.6MB

    • MD5

      254d513b097d05bc6af694aa5bbb4fbe

    • SHA1

      19b092047aaf8ed3a91986d6a7e04ee07377c368

    • SHA256

      4a41c3a60f9f570a47904e81883e69fe6224f71bd7ce856808eac0d1c4033524

    • SHA512

      afc69bef6a63ea54dd4f0b05dca02503da5cb348c8980b66d83ad3076acc84c09733f66d69576533cb93240d989c38ac9a5dd26c6ae0214935399daeca29fcde

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBJB/bS:sxX7QnxrloE5dpUpmb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks