Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8b92b038889be2da5c222872fb024d7a26c991415cb048373056518c491b19ee

  • Size

    685KB

  • Sample

    230808-lwebxabg65

  • MD5

    8df71313dff890f4650214dfa0a7325f

  • SHA1

    cbc9674b5b99c5a0ccafeee429ad3f495ef914ee

  • SHA256

    8b92b038889be2da5c222872fb024d7a26c991415cb048373056518c491b19ee

  • SHA512

    f3672693b540c5a184d64dd094ee1422dcd3f693285cb549eeaf368142d0400974aca96568f65f72e96a2e86f91255e6def53f27533aa2fea296b6582d6aa010

  • SSDEEP

    12288:8yvJRBusyOgG00Fkon7epLV9nn13QxydyLXIpOB5+Z27+9p:PFud0FEfCSqXIe

Malware Config

Extracted

Family

azorult

C2

http://mchas.shop/PL341/index.php

Targets

    • Target

      8b92b038889be2da5c222872fb024d7a26c991415cb048373056518c491b19ee

    • Size

      685KB

    • MD5

      8df71313dff890f4650214dfa0a7325f

    • SHA1

      cbc9674b5b99c5a0ccafeee429ad3f495ef914ee

    • SHA256

      8b92b038889be2da5c222872fb024d7a26c991415cb048373056518c491b19ee

    • SHA512

      f3672693b540c5a184d64dd094ee1422dcd3f693285cb549eeaf368142d0400974aca96568f65f72e96a2e86f91255e6def53f27533aa2fea296b6582d6aa010

    • SSDEEP

      12288:8yvJRBusyOgG00Fkon7epLV9nn13QxydyLXIpOB5+Z27+9p:PFud0FEfCSqXIe

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks