Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Vespy 3.0.exe
-
Size
17.9MB
-
Sample
230528-d7zszsee5y
-
MD5
e407784b2e34ed26a41e95db00a29642
-
SHA1
1577177759fb6fc832c7a51fddc2ba9d2ec8c4e9
-
SHA256
f062856249fa271bd46535c90e11e7d06ca5c03db24aca7450061c700ef418dd
-
SHA512
1cec5c2bc2a54dace1d9627982be8230393f23d02853a7298a248aa2ef9a8dbf370fc02df3d64a4afed17a1cdbfbc513dfba4bb7892d671a4fc261d6b002e3b0
-
SSDEEP
393216:vu7L/quw3pp9QDDhL2Vmd6ml/m3pFVBkQJ4OCw/V4ahn/+wlToG5xth:vCLSnppOyVmdXKF3b43gD/+wl8GPth
Malware Config
Targets
-
-
Target
Vespy 3.0.exe
-
Size
17.9MB
-
MD5
e407784b2e34ed26a41e95db00a29642
-
SHA1
1577177759fb6fc832c7a51fddc2ba9d2ec8c4e9
-
SHA256
f062856249fa271bd46535c90e11e7d06ca5c03db24aca7450061c700ef418dd
-
SHA512
1cec5c2bc2a54dace1d9627982be8230393f23d02853a7298a248aa2ef9a8dbf370fc02df3d64a4afed17a1cdbfbc513dfba4bb7892d671a4fc261d6b002e3b0
-
SSDEEP
393216:vu7L/quw3pp9QDDhL2Vmd6ml/m3pFVBkQJ4OCw/V4ahn/+wlToG5xth:vCLSnppOyVmdXKF3b43gD/+wl8GPth
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-