Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Details8322.iso
-
Size
1.2MB
-
Sample
221027-svmefsceh2
-
MD5
d21ad088acf5c655db5601dfd0bfcfe4
-
SHA1
138254257232b3400fe72898b1358d787a9f97f3
-
SHA256
202d5e0b08a0ad5d5e6833d1f45ec8c403d67e85b5509dbf0763c262a1572522
-
SHA512
6a97b8588c76474071288974a5c787770bc500499cee82c6da03da2aaed2f4410b99eff76aeac7e4f7867c0b065befc2f986e39fdbf5edad7cdf7d5b669e922b
-
SSDEEP
24576:ievu6S6gRw2ZwigHHHHbwbwMwKwqwJwR6IIo6y8bRZAuM6dMCSHc:nvu6S6gRw2ZwigHHHHbwbwMwKwqwJwRu
Static task
static1
Behavioral task
behavioral1
Sample
Details.lnk
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
alphabetical/minds.cmd
Resource
win10-20220812-en
Malware Config
Extracted
qakbot
403.1051
BB04
1666776497
197.204.53.242:443
83.244.63.21:443
27.110.134.202:995
173.49.74.62:443
181.164.194.228:443
24.116.45.121:443
41.47.249.185:443
24.206.27.39:443
113.183.223.8:443
186.188.80.134:443
64.207.237.118:443
156.216.134.70:995
58.247.115.126:995
180.151.116.67:443
41.140.63.187:443
144.202.15.58:443
190.199.97.108:993
172.117.139.142:995
45.230.169.132:995
24.9.220.167:443
190.24.45.24:995
193.3.19.137:443
201.68.209.47:32101
68.62.199.70:443
167.58.254.85:443
156.197.230.148:995
175.205.2.54:443
200.233.108.153:995
105.106.60.149:443
102.159.110.79:995
2.88.206.121:443
190.193.180.228:443
216.131.22.236:995
190.37.174.11:2222
206.1.203.0:443
186.188.96.197:443
190.74.248.136:443
206.1.128.203:443
201.249.100.208:995
190.33.241.216:443
190.75.151.66:2222
198.2.51.242:993
90.165.109.4:2222
71.199.168.185:443
181.56.171.3:995
41.103.1.16:443
24.207.97.117:443
105.157.86.118:443
201.223.169.238:32100
47.14.229.4:443
70.60.142.214:2222
142.181.183.42:2222
41.62.165.152:443
41.97.205.96:443
41.97.14.60:443
151.213.183.141:995
75.84.234.68:443
186.18.210.16:443
41.96.204.196:443
64.123.103.123:443
186.48.174.77:995
152.170.17.136:443
160.176.151.70:995
78.179.135.247:443
191.33.187.192:2222
98.207.190.55:443
196.65.217.253:995
78.50.124.220:443
91.171.72.214:32100
186.154.189.162:995
101.109.44.197:995
97.92.4.205:8443
41.36.159.36:993
70.115.104.126:443
181.44.34.172:443
88.240.75.201:443
24.130.228.100:443
41.109.228.108:995
24.177.111.153:443
60.54.65.27:443
189.129.38.158:2222
190.203.51.133:2222
96.46.230.10:443
222.117.141.133:443
190.207.137.189:2222
208.78.220.120:443
105.108.223.181:443
41.104.155.245:443
65.140.11.170:443
184.159.76.47:443
105.98.223.169:443
197.0.225.39:443
41.101.193.38:443
105.155.151.29:995
196.207.146.151:443
190.37.112.223:2222
14.54.83.15:443
93.156.96.171:443
58.186.75.42:443
189.110.3.60:2222
186.18.77.99:443
41.107.78.169:443
149.126.159.224:443
156.196.169.222:443
190.100.149.122:995
1.0.215.176:443
202.5.53.143:443
206.1.199.156:2087
102.156.162.83:443
220.134.54.185:2222
88.132.109.147:443
190.29.228.61:443
41.101.183.90:443
94.36.5.31:443
102.184.30.42:443
102.187.63.127:995
190.33.87.140:443
187.198.16.39:443
62.46.231.64:443
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
Details.lnk
-
Size
1KB
-
MD5
fc5bc2bb92c5fb2153944fcb5d255fd3
-
SHA1
c92802d6480ec15fadb8f82460d60f7684f823f1
-
SHA256
1ce88481bc2e46aadf6c14d6b94d1394421b47e49fc34f867e08c2b73524763d
-
SHA512
aa57a75444b620d923f1a6852fad7d6522c082038feec15559bee099909a1747c6b179639f0796bb7759a36a6e8990020ef32ae2504c8e87cd0e45beb9915973
-
Executes dropped EXE
-
-
-
Target
alphabetical/minds.cmd
-
Size
336B
-
MD5
06736c0d660316000d7be740e8e4f697
-
SHA1
b5d9ebb8c45e073cab006f763bdcd6fb8e7c10ab
-
SHA256
a9429c7dcf577e0974eb8ab8653cd6044eb7938d8d5e2b87a39584ac31b2025d
-
SHA512
de4ee253b9a822d739ef69989f77fc366ff5932bab584b069af1a1855c2128c49785ad6fd82a118b8d39ca47a06e0a09ae9a8b8bafb6c81b68ad02d30e3666d8
Score1/10 -
-
-
Target
alphabetical/unperched.dat
-
Size
627KB
-
MD5
cba1ea7fd2999c09a57ab80ec61a366c
-
SHA1
ed15bd41dec1f7628be89adff8995242d5281e69
-
SHA256
d0232586a1421eb851d5817a55fd1afa68a0392cc94689b5af3ae093f18ef823
-
SHA512
12251a0cb3f93a098a12cb3f78a439c98d67465f68c5151f18c2692ba5331deb34e74723b201f8b7e85dcb2027db55ec6681890baeb70cb142979a9ef652b65c
-
SSDEEP
12288:cx8IFmbH8yS5XXUrIVcxxUnMnwldJOCP6HcD5q:x6y8bRZAuM6dMCSHc4
-