Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    zlibai.dll

  • Size

    26.1MB

  • Sample

    230427-hf3ssaga9v

  • MD5

    eaa28762cd1fb1c7eba1fc77ef9791aa

  • SHA1

    212142d9e2ed9c7674c975bbeb9abc9211b4af42

  • SHA256

    6f1161528775718592e4b9dbb08e04bc7e717f15da6665e6483d699783837bad

  • SHA512

    8fb578bd4e9422eec2d1e622abd99f95c8e32360daf4b3a003195e4d9b198c048e0b312abf73b87195c13acd3234d4f15bd66fe67a47985daa38e5ef454307e4

  • SSDEEP

    196608:tZ1Fmw2v2mVO0iWRjwr5NUR4ureIXH5yJ7nxkYuQPP3r7DbGF/UALgV:tHFCO0bRkr5NUR4ureIXYjTuQPPy/UQ

Malware Config

Targets

    • Target

      zlibai.dll

    • Size

      26.1MB

    • MD5

      eaa28762cd1fb1c7eba1fc77ef9791aa

    • SHA1

      212142d9e2ed9c7674c975bbeb9abc9211b4af42

    • SHA256

      6f1161528775718592e4b9dbb08e04bc7e717f15da6665e6483d699783837bad

    • SHA512

      8fb578bd4e9422eec2d1e622abd99f95c8e32360daf4b3a003195e4d9b198c048e0b312abf73b87195c13acd3234d4f15bd66fe67a47985daa38e5ef454307e4

    • SSDEEP

      196608:tZ1Fmw2v2mVO0iWRjwr5NUR4ureIXH5yJ7nxkYuQPP3r7DbGF/UALgV:tHFCO0bRkr5NUR4ureIXYjTuQPPy/UQ

    • Detects Grandoreiro payload

    • Grandoreiro

      Part of a group of banking trojans, targeting Spanish and Portuguese speaking countries.

MITRE ATT&CK Enterprise v6

Tasks