Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    82b0930120afef192da8d6f7ae2275298986918eed55b4765a4ee665a23453d0

  • Size

    381KB

  • Sample

    220922-vjshfacaa2

  • MD5

    004c622aceb5f52236ce3b71cb6dc69e

  • SHA1

    853ec66b77b29c1e41478da511ced63920d91dc7

  • SHA256

    93f27d67ad4133e3f6f746e9ff450fbfa48fe22389ef6cd7f9cc8c383432b946

  • SHA512

    9cb9b06c28510f3fd8548ede28a819383e9047a9d95181bb5c1a12e345f7cc3fcb4a974f4174191b1b5ed8549023c0e58afe59ee7c6abeb25ac52cff36e6db8e

  • SSDEEP

    6144:idbRS3YcdGogKgb2R/kFqdKfBuFZqCiY0GE1M7FR162nX4riSudfUaMtQt:OzWxfgiRL6u/lLg4FRs2noOdMaMK

Score
10/10

Malware Config

Extracted

Family

blustealer

C2

https://api.telegram.org/bot5351997584:AAEyh4aj9rNp8tJtHYZqoYG-PSzq-z5M18M/sendMessage?chat_id=1374455932

Targets

    • Target

      82b0930120afef192da8d6f7ae2275298986918eed55b4765a4ee665a23453d0

    • Size

      436KB

    • MD5

      3c319504f8c3cd2df7ca9642e2baf07c

    • SHA1

      1dcbf401f7d66b19d8d5e1362e45a0642fd31226

    • SHA256

      82b0930120afef192da8d6f7ae2275298986918eed55b4765a4ee665a23453d0

    • SHA512

      58571bb15727a6281da5bca88de50479a79dee60e14a1d79fac69d6f0c03934f97018320b34487c2f8d340b2a8b8d4debd2c7e93ad3251306595fd84bdb221f2

    • SSDEEP

      12288:ZWnxfgsRL4u/1AlLK6FRY2n8OPKxGvYmB:mxgsRftD0C2nKG

    Score
    6/10
    • Accesses Microsoft Outlook profiles

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks