Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Vespy 3.0.exe

  • Size

    17.9MB

  • Sample

    230528-d7zszsee5y

  • MD5

    e407784b2e34ed26a41e95db00a29642

  • SHA1

    1577177759fb6fc832c7a51fddc2ba9d2ec8c4e9

  • SHA256

    f062856249fa271bd46535c90e11e7d06ca5c03db24aca7450061c700ef418dd

  • SHA512

    1cec5c2bc2a54dace1d9627982be8230393f23d02853a7298a248aa2ef9a8dbf370fc02df3d64a4afed17a1cdbfbc513dfba4bb7892d671a4fc261d6b002e3b0

  • SSDEEP

    393216:vu7L/quw3pp9QDDhL2Vmd6ml/m3pFVBkQJ4OCw/V4ahn/+wlToG5xth:vCLSnppOyVmdXKF3b43gD/+wl8GPth

Malware Config

Targets

    • Target

      Vespy 3.0.exe

    • Size

      17.9MB

    • MD5

      e407784b2e34ed26a41e95db00a29642

    • SHA1

      1577177759fb6fc832c7a51fddc2ba9d2ec8c4e9

    • SHA256

      f062856249fa271bd46535c90e11e7d06ca5c03db24aca7450061c700ef418dd

    • SHA512

      1cec5c2bc2a54dace1d9627982be8230393f23d02853a7298a248aa2ef9a8dbf370fc02df3d64a4afed17a1cdbfbc513dfba4bb7892d671a4fc261d6b002e3b0

    • SSDEEP

      393216:vu7L/quw3pp9QDDhL2Vmd6ml/m3pFVBkQJ4OCw/V4ahn/+wlToG5xth:vCLSnppOyVmdXKF3b43gD/+wl8GPth

    Score
    7/10
    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks