Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Vision Spoofer.exe

  • Size

    13.9MB

  • Sample

    230502-rebscabc79

  • MD5

    0b3056ff82502af74f12ac17eea25785

  • SHA1

    8468a2cc845ea00c60538a3bd95e6d833eaf0035

  • SHA256

    00f62ef8e8b23bdb35edb8cf19c5de05204e3b4533ec3fad2d92c590e4217a2d

  • SHA512

    09c6916f58486a76a17c623e7df84ffcaab70ecc69888ee8627be7a0b959fddff640f38ea1efb9d8b9e6a32668f2573095a136c4d486683213d7c39808da3944

  • SSDEEP

    196608:Jd/lOqPnih8FXj+hYeB0sKYu/PaQgKDnO8NpHzgsAGKaRZtG7ETPtqlKpVd00mVi:MqPnLFCjQpDOETgsv/GIZ6KV01gk

Score
7/10

Malware Config

Targets

    • Target

      Vision Spoofer.exe

    • Size

      13.9MB

    • MD5

      0b3056ff82502af74f12ac17eea25785

    • SHA1

      8468a2cc845ea00c60538a3bd95e6d833eaf0035

    • SHA256

      00f62ef8e8b23bdb35edb8cf19c5de05204e3b4533ec3fad2d92c590e4217a2d

    • SHA512

      09c6916f58486a76a17c623e7df84ffcaab70ecc69888ee8627be7a0b959fddff640f38ea1efb9d8b9e6a32668f2573095a136c4d486683213d7c39808da3944

    • SSDEEP

      196608:Jd/lOqPnih8FXj+hYeB0sKYu/PaQgKDnO8NpHzgsAGKaRZtG7ETPtqlKpVd00mVi:MqPnLFCjQpDOETgsv/GIZ6KV01gk

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks