Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c76d65d7c08ebf0b02b48a8a187e2a0e53b5de9e319f568fdd2c5563a0bb08cd

  • Size

    425KB

  • Sample

    200122-jyzeg1enhs

  • MD5

    f60e67ad01fa33a9dd1e9c2852079826

  • SHA1

    18902959855e7269245495caacec2a7fe796d58c

  • SHA256

    c76d65d7c08ebf0b02b48a8a187e2a0e53b5de9e319f568fdd2c5563a0bb08cd

  • SHA512

    1b29d3fbc4cdea6fdf6da297382f644fb697fb92872e67dee0bcf169f02ea3f4e9da000c9d7ff3531d5284491119866a0f29bcf64e2e1cebca61e981c24a2d31

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

81.214.253.80:443

98.15.140.226:80

180.33.71.88:80

178.33.167.120:8080

144.76.56.36:8080

176.58.93.123:80

51.38.134.203:8080

196.6.119.137:80

82.79.244.92:80

175.181.7.188:80

183.87.40.21:8080

201.183.251.100:80

91.73.169.210:80

188.251.213.180:443

110.142.161.90:80

177.144.130.105:443

106.248.79.174:80

70.45.30.28:80

187.72.47.161:443

185.244.167.25:443

rsa_pubkey.plain

Targets

    • Target

      c76d65d7c08ebf0b02b48a8a187e2a0e53b5de9e319f568fdd2c5563a0bb08cd

    • Size

      425KB

    • MD5

      f60e67ad01fa33a9dd1e9c2852079826

    • SHA1

      18902959855e7269245495caacec2a7fe796d58c

    • SHA256

      c76d65d7c08ebf0b02b48a8a187e2a0e53b5de9e319f568fdd2c5563a0bb08cd

    • SHA512

      1b29d3fbc4cdea6fdf6da297382f644fb697fb92872e67dee0bcf169f02ea3f4e9da000c9d7ff3531d5284491119866a0f29bcf64e2e1cebca61e981c24a2d31

    Score
    10/10
    • Emotet

      Emotet is a trojan that is primarily spread through spam emails

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks