Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    522adad0782501491314a78c7f32006b.dll

  • Size

    126KB

  • Sample

    221031-wqwn4scecp

  • MD5

    522adad0782501491314a78c7f32006b

  • SHA1

    e487edceeef3a41e2a8eea1e684bcbc3b39adb97

  • SHA256

    351fd9b73fa0cbbdfbce0793ca41544f5191650d79317a34024f3c09f73ac9ba

  • SHA512

    5f8a103deea3ed5f8641d1f4c91a4f891a8208b679cadbfac4a068afbad0d2f777cd29ace4bdfec590e722435473e4f8465fb80d5cda792dc0236646580101a7

  • SSDEEP

    3072:ox7pOYzBekEmWDWCMq6As523HeS9FAiZ87vO2rlL3Rnu9:ox7ZNhE/dMq6AO0a7vVlT

Malware Config

Targets

    • Target

      522adad0782501491314a78c7f32006b.dll

    • Size

      126KB

    • MD5

      522adad0782501491314a78c7f32006b

    • SHA1

      e487edceeef3a41e2a8eea1e684bcbc3b39adb97

    • SHA256

      351fd9b73fa0cbbdfbce0793ca41544f5191650d79317a34024f3c09f73ac9ba

    • SHA512

      5f8a103deea3ed5f8641d1f4c91a4f891a8208b679cadbfac4a068afbad0d2f777cd29ace4bdfec590e722435473e4f8465fb80d5cda792dc0236646580101a7

    • SSDEEP

      3072:ox7pOYzBekEmWDWCMq6As523HeS9FAiZ87vO2rlL3Rnu9:ox7ZNhE/dMq6AO0a7vVlT

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Detect Amadey credential stealer module

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Accesses Microsoft Outlook profiles

MITRE ATT&CK Enterprise v6

Tasks