Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Remittance_Advice_DGLAND_Batch.jar

  • Size

    455KB

  • Sample

    200714-tb65dpgg96

  • MD5

    ebc9e6aae5909b71a372bed56d2a43d4

  • SHA1

    6330db8d5efb0a023d2c8a470f88c10cca4533c9

  • SHA256

    c2de1f79db8ad0b36cdce74357bd8c6602050e4d3b6304bb85f5234df7557d60

  • SHA512

    2401788b1698cc1337737c47361bcc434e5060c6f6c2821025c34d07de31e3d5a9f0a26d8a862f7ec1f16ec03e0c108f01a7c7b16bad2469d19b8bca2a51a493

Score
7/10

Malware Config

Targets

    • Target

      Remittance_Advice_DGLAND_Batch.jar

    • Size

      455KB

    • MD5

      ebc9e6aae5909b71a372bed56d2a43d4

    • SHA1

      6330db8d5efb0a023d2c8a470f88c10cca4533c9

    • SHA256

      c2de1f79db8ad0b36cdce74357bd8c6602050e4d3b6304bb85f5234df7557d60

    • SHA512

      2401788b1698cc1337737c47361bcc434e5060c6f6c2821025c34d07de31e3d5a9f0a26d8a862f7ec1f16ec03e0c108f01a7c7b16bad2469d19b8bca2a51a493

    Score
    7/10
    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks