Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    tmp

  • Size

    1.2MB

  • Sample

    220924-cyvbgaadd2

  • MD5

    f960f173e544cba85a215c9c4378f872

  • SHA1

    56af4e7dca3b3885b2491dd846cc0fe244858799

  • SHA256

    0e4053540da52df835cccda6e4694aee2cb241fc40665c715b7f890cf6b69296

  • SHA512

    549546095b51318ab9cfcc7302106f9faf32d3ba26e4c78e263ab55460cee3eee97d9e456ddfd489f979f221388fa7c889a8f9115197ef38005c866abe65cb95

  • SSDEEP

    24576:7hLuyy5eNo+Jm8DUQCNJZiWZJs8OhYShfAYoILsAs3mDDr9He:tLuyyeJT1wJJsJjf3Zsh2b

Malware Config

Extracted

Family

snakekeylogger

Credentials
C2

https://api.telegram.org/bot5321688653:AAEI2yqGrOA_-sRZ3xaqutrexraSgFa0AnA/sendMessage?chat_id=5048077662

Targets

    • Target

      tmp

    • Size

      1.2MB

    • MD5

      f960f173e544cba85a215c9c4378f872

    • SHA1

      56af4e7dca3b3885b2491dd846cc0fe244858799

    • SHA256

      0e4053540da52df835cccda6e4694aee2cb241fc40665c715b7f890cf6b69296

    • SHA512

      549546095b51318ab9cfcc7302106f9faf32d3ba26e4c78e263ab55460cee3eee97d9e456ddfd489f979f221388fa7c889a8f9115197ef38005c866abe65cb95

    • SSDEEP

      24576:7hLuyy5eNo+Jm8DUQCNJZiWZJs8OhYShfAYoILsAs3mDDr9He:tLuyyeJT1wJJsJjf3Zsh2b

    • Snake Keylogger

      Keylogger and Infostealer first seen in November 2020.

    • Snake Keylogger payload

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks