Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4e97b01d24ec02e60c7f3d1097b2adf262fb5496d1cac466689ab9e5965317b1

  • Size

    3.7MB

  • Sample

    231012-qt7ynaec25

  • MD5

    de51b859f41b6a9138285cf26a1fad84

  • SHA1

    a2189ca8db0f01435282fac0f5a44005751604bb

  • SHA256

    4e97b01d24ec02e60c7f3d1097b2adf262fb5496d1cac466689ab9e5965317b1

  • SHA512

    8f96cc28a01a36f37bbfb7863560a55115ad73ba97daf57ff515816838dd5b30d95c3422fc72f880492116620209da5faccf0fb723fe935a1c1df45664d4d98f

  • SSDEEP

    98304:4fYw/F/AWO7+d00Vs18LnORE/TRZWT1wS/jl1v:4f3Ow00ayTPLTWT9B

Malware Config

Extracted

Family

oscorp

Botnet

0725ZD90H1

AES_key

Targets

    • Target

      4e97b01d24ec02e60c7f3d1097b2adf262fb5496d1cac466689ab9e5965317b1

    • Size

      3.7MB

    • MD5

      de51b859f41b6a9138285cf26a1fad84

    • SHA1

      a2189ca8db0f01435282fac0f5a44005751604bb

    • SHA256

      4e97b01d24ec02e60c7f3d1097b2adf262fb5496d1cac466689ab9e5965317b1

    • SHA512

      8f96cc28a01a36f37bbfb7863560a55115ad73ba97daf57ff515816838dd5b30d95c3422fc72f880492116620209da5faccf0fb723fe935a1c1df45664d4d98f

    • SSDEEP

      98304:4fYw/F/AWO7+d00Vs18LnORE/TRZWT1wS/jl1v:4f3Ow00ayTPLTWT9B

    • Oscorp

      Oscorp is an Android stealer that targets multiple financial information first seen in Feb 2021.

    • Makes use of the framework's Accessibility service.

    • Removes its main activity from the application launcher

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks