Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4dda10432775900b5ebe4b0ee53604a8ea6ed9e169de3c22e01df06f5358a88f

  • Size

    2.6MB

  • Sample

    241027-2yx5ssskgs

  • MD5

    49f6b2459cac2375df826ff4d295bcbb

  • SHA1

    56506a49a90932c469877a51086bb6dd0ad3cfb9

  • SHA256

    4dda10432775900b5ebe4b0ee53604a8ea6ed9e169de3c22e01df06f5358a88f

  • SHA512

    624589329c79d42b767dd7b498a4cb1fe1b7e8c9859d9cc4392841de85d510c6d906d229461851c85eed111ff132cc1ce1de2f9a057b09c4783cf2dcb5b6da12

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBNB/bS:sxX7QnxrloE5dpUpmb

Malware Config

Targets

    • Target

      4dda10432775900b5ebe4b0ee53604a8ea6ed9e169de3c22e01df06f5358a88f

    • Size

      2.6MB

    • MD5

      49f6b2459cac2375df826ff4d295bcbb

    • SHA1

      56506a49a90932c469877a51086bb6dd0ad3cfb9

    • SHA256

      4dda10432775900b5ebe4b0ee53604a8ea6ed9e169de3c22e01df06f5358a88f

    • SHA512

      624589329c79d42b767dd7b498a4cb1fe1b7e8c9859d9cc4392841de85d510c6d906d229461851c85eed111ff132cc1ce1de2f9a057b09c4783cf2dcb5b6da12

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBNB/bS:sxX7QnxrloE5dpUpmb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks