Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    21d178e0688af591964ae00b71263d2e086706017ebc98d7488d57771144d337.zip

  • Size

    251KB

  • Sample

    230816-dwg4ssgg4y

  • MD5

    7443d602e4ac5e48ace17d79000f96ea

  • SHA1

    9d50276387d01a9bbe432fa0a56b83d3f39d8118

  • SHA256

    f2d3842ed505276ad4cbecdb648107a55a6e8171184e059a1a506a8caa213df1

  • SHA512

    32078e408a6f8c3b662615516099a0914cffaa87adea8b4c0749fc1fdfad3eb2a8394055e36ce95185619d26032f62f0fa26e6f551f92b15d83b602311bb9c92

  • SSDEEP

    6144:MfvzlVAX54ZGKdyi6wvfJ5+RS7z6+R6ikzY:MTlVc54Z7yrIX+HpY

Score
10/10

Malware Config

Extracted

Family

sandrorat

C2

62.173.138.15:1177

Targets

    • Target

      21d178e0688af591964ae00b71263d2e086706017ebc98d7488d57771144d337.apk

    • Size

      254KB

    • MD5

      34896173b5d0c8ddc638c44b3cacdcb9

    • SHA1

      135395bc831527b04fc41a94f2972115f1ad7475

    • SHA256

      21d178e0688af591964ae00b71263d2e086706017ebc98d7488d57771144d337

    • SHA512

      74f7b2ec010d3d7bce313b36a1d13897c41fe2f6bb1f385a90a52035a162119fd2ee533a6b82983e364a70060c72ac62aea9e774586a5f545f59425758f0c198

    • SSDEEP

      6144:6yKs44cbQAa36N8oK+r2kplir6V/HOUD33/wTa:neMAa36N8H+r/irKHOUbf

    Score
    7/10
    • Acquires the wake lock.

MITRE ATT&CK Matrix

Tasks