Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
82b0930120afef192da8d6f7ae2275298986918eed55b4765a4ee665a23453d0
-
Size
381KB
-
Sample
220922-vjshfacaa2
-
MD5
004c622aceb5f52236ce3b71cb6dc69e
-
SHA1
853ec66b77b29c1e41478da511ced63920d91dc7
-
SHA256
93f27d67ad4133e3f6f746e9ff450fbfa48fe22389ef6cd7f9cc8c383432b946
-
SHA512
9cb9b06c28510f3fd8548ede28a819383e9047a9d95181bb5c1a12e345f7cc3fcb4a974f4174191b1b5ed8549023c0e58afe59ee7c6abeb25ac52cff36e6db8e
-
SSDEEP
6144:idbRS3YcdGogKgb2R/kFqdKfBuFZqCiY0GE1M7FR162nX4riSudfUaMtQt:OzWxfgiRL6u/lLg4FRs2noOdMaMK
Behavioral task
behavioral1
Sample
82b0930120afef192da8d6f7ae2275298986918eed55b4765a4ee665a23453d0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
82b0930120afef192da8d6f7ae2275298986918eed55b4765a4ee665a23453d0.exe
Resource
win10v2004-20220901-en
Malware Config
Extracted
blustealer
https://api.telegram.org/bot5351997584:AAEyh4aj9rNp8tJtHYZqoYG-PSzq-z5M18M/sendMessage?chat_id=1374455932
Targets
-
-
Target
82b0930120afef192da8d6f7ae2275298986918eed55b4765a4ee665a23453d0
-
Size
436KB
-
MD5
3c319504f8c3cd2df7ca9642e2baf07c
-
SHA1
1dcbf401f7d66b19d8d5e1362e45a0642fd31226
-
SHA256
82b0930120afef192da8d6f7ae2275298986918eed55b4765a4ee665a23453d0
-
SHA512
58571bb15727a6281da5bca88de50479a79dee60e14a1d79fac69d6f0c03934f97018320b34487c2f8d340b2a8b8d4debd2c7e93ad3251306595fd84bdb221f2
-
SSDEEP
12288:ZWnxfgsRL4u/1AlLK6FRY2n8OPKxGvYmB:mxgsRftD0C2nKG
Score6/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-