Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4436-133-0x0000000000D30000-0x0000000000D53000-memory.dmp

  • Size

    140KB

  • Sample

    230302-z7c5waeg95

  • MD5

    7d33b2c822d26d16c6e02062154a81c3

  • SHA1

    59139555f33df7e4c321e051e11f9a2899c28258

  • SHA256

    51c267e5aa1553c403bbbc49660b0ca520a6d36350f9e0a35fddd01458bc7a65

  • SHA512

    36b5b04d87af54d69401904ceb777bc41158246ea7cc8c2cff7420a0db1b6dd1a092a7b05335224893741b1d402fcae8ddd4283831c0d60a8f1c593abe37511f

  • SSDEEP

    3072:vMucC9DExaqOALMv/uHWlA3J+ml6MTBfPgM/tL:0w6aq5Mv/DW3JPl6MTBHgM/B

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

404.74

Botnet

BB17

Campaign

1677767634

C2

81.157.206.138:2222

50.68.186.195:443

184.176.110.61:61202

71.31.101.183:443

85.231.105.49:2222

62.35.100.38:443

190.141.133.204:443

109.158.144.102:995

82.212.115.116:443

47.21.51.138:995

208.180.17.32:2222

86.130.9.136:2222

184.189.41.80:443

23.242.20.21:443

103.12.133.134:2222

86.225.214.138:2222

12.172.173.82:50001

142.118.243.5:2222

86.208.35.220:2222

47.21.51.138:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      4436-133-0x0000000000D30000-0x0000000000D53000-memory.dmp

    • Size

      140KB

    • MD5

      7d33b2c822d26d16c6e02062154a81c3

    • SHA1

      59139555f33df7e4c321e051e11f9a2899c28258

    • SHA256

      51c267e5aa1553c403bbbc49660b0ca520a6d36350f9e0a35fddd01458bc7a65

    • SHA512

      36b5b04d87af54d69401904ceb777bc41158246ea7cc8c2cff7420a0db1b6dd1a092a7b05335224893741b1d402fcae8ddd4283831c0d60a8f1c593abe37511f

    • SSDEEP

      3072:vMucC9DExaqOALMv/uHWlA3J+ml6MTBfPgM/tL:0w6aq5Mv/DW3JPl6MTBHgM/B

    Score
    5/10
    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks