Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
73d34ceec57d41cab2e4b22046898b531fe0b59ab16c533c7eee3a52caf29848.zip
-
Size
290KB
-
Sample
221114-lqny6age62
-
MD5
0a8582bffda86da0737d792fe40f4fa8
-
SHA1
7c96a051b763f8c712a24a41fa52673b883c5bed
-
SHA256
66a14689faa12b80fa66d9a8c1e1393522334594a4dac1243a83bac8c3203356
-
SHA512
d559013981722d0b33857dd99e69a436c8be27e72e8a4ef4b18aabb66d5aaff2067719f80e16657e16b7604f0474075adb9161c71b64fe7a84b4f40b293e194f
-
SSDEEP
6144:mLa9y1xvrgZzgvtQVAY+JYGQ1FtzVascl1cwAG6lGLhsHzrr:kUUMEvtQVAY8Q1zVasMcwatT
Static task
static1
Behavioral task
behavioral1
Sample
73d34ceec57d41cab2e4b22046898b531fe0b59ab16c533c7eee3a52caf29848.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73d34ceec57d41cab2e4b22046898b531fe0b59ab16c533c7eee3a52caf29848.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
fickerstealer
mistral3.xyz:80
Targets
-
-
Target
73d34ceec57d41cab2e4b22046898b531fe0b59ab16c533c7eee3a52caf29848.exe
-
Size
511KB
-
MD5
4988a43a98b7d9c6aa7e71b8a8919fd6
-
SHA1
5e0f468d9e9a9d14eef11caf54dafbe384303be4
-
SHA256
73d34ceec57d41cab2e4b22046898b531fe0b59ab16c533c7eee3a52caf29848
-
SHA512
1e3feb3861b9c664205edddd09361b2a54a9df3424c582bfdb955a8a65a26eae3adc1c825e7973b13bd9e39626f5723d3efbe27b828c8c47648d87d756f59869
-
SSDEEP
12288:eXSX3CPuJE0/PRm3HAURSEy0OiISPSpoKT1EW0rF3:pCPuSpRSoUpoMy3
Score10/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-