Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    efa4a0859c8290523a0df1f94b4cc9ce216d6c38404b4b28a1abd9fc43e1f731

  • Size

    275KB

  • Sample

    230411-w1l8esfh3x

  • MD5

    5c02645c4cb1a85628d57c6ab406d608

  • SHA1

    af5a1a5f5d29906f3bcec8d65dc7059295e25b02

  • SHA256

    efa4a0859c8290523a0df1f94b4cc9ce216d6c38404b4b28a1abd9fc43e1f731

  • SHA512

    2dab696d97310d10569a25dd1358f24d1776d19f800f2cafaf8beee065ab2e3398f37dd37e9cdb6afda262c3e59e11c333256a315266a34a1e864f068a21f432

  • SSDEEP

    6144:aZzdW+h4Fu1WI16M1JfCBa1vR+SIQWTt:aWFudcijR+F

Malware Config

Targets

    • Target

      efa4a0859c8290523a0df1f94b4cc9ce216d6c38404b4b28a1abd9fc43e1f731

    • Size

      275KB

    • MD5

      5c02645c4cb1a85628d57c6ab406d608

    • SHA1

      af5a1a5f5d29906f3bcec8d65dc7059295e25b02

    • SHA256

      efa4a0859c8290523a0df1f94b4cc9ce216d6c38404b4b28a1abd9fc43e1f731

    • SHA512

      2dab696d97310d10569a25dd1358f24d1776d19f800f2cafaf8beee065ab2e3398f37dd37e9cdb6afda262c3e59e11c333256a315266a34a1e864f068a21f432

    • SSDEEP

      6144:aZzdW+h4Fu1WI16M1JfCBa1vR+SIQWTt:aWFudcijR+F

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Accesses Microsoft Outlook profiles

MITRE ATT&CK Enterprise v6

Tasks