Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2c4ae2bb8418890dcb1418a8777ebddd.exe

  • Size

    2.9MB

  • Sample

    230805-ycc1ysfd81

  • MD5

    2c4ae2bb8418890dcb1418a8777ebddd

  • SHA1

    7553c755559dd811c4a4904203da991accf0d3d6

  • SHA256

    fb553e12381d42a612c713968078424201794a35fd13c681ae7faa77bf18e553

  • SHA512

    fd7c26de8b196288c31d1fd52a86efb0cd0a68321812715dd0a2e133f8433e1cb4f446f517d7e9edbd9ee93c83e21b37d0431cc401e87da8c1397a099a999467

  • SSDEEP

    49152:g4R1oLkfMMMMMO7hBm0ytzuItW8VxiRVw5UjSaKWdhr9GrEzpThyZfjdVWljUunW:gxkfMMMMMOtBmtou2RVw5zEVG41TqfjZ

Malware Config

Targets

    • Target

      2c4ae2bb8418890dcb1418a8777ebddd.exe

    • Size

      2.9MB

    • MD5

      2c4ae2bb8418890dcb1418a8777ebddd

    • SHA1

      7553c755559dd811c4a4904203da991accf0d3d6

    • SHA256

      fb553e12381d42a612c713968078424201794a35fd13c681ae7faa77bf18e553

    • SHA512

      fd7c26de8b196288c31d1fd52a86efb0cd0a68321812715dd0a2e133f8433e1cb4f446f517d7e9edbd9ee93c83e21b37d0431cc401e87da8c1397a099a999467

    • SSDEEP

      49152:g4R1oLkfMMMMMO7hBm0ytzuItW8VxiRVw5UjSaKWdhr9GrEzpThyZfjdVWljUunW:gxkfMMMMMOtBmtou2RVw5zEVG41TqfjZ

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.