Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b1da22324541e3de280c13160289986a.exe

  • Size

    444KB

  • Sample

    231012-t9pnssca8y

  • MD5

    b1da22324541e3de280c13160289986a

  • SHA1

    71786d8fa931c49e942bfe428aade8a15231852b

  • SHA256

    91735a2a578ca710a1f2e09985ba20079971ee87aa45bfb4b18f4f74a43ce08f

  • SHA512

    a04c5c9f40a6f42c659a8b5056e2d89f0d96175cd0aa76fa875a666abc91dfd52beec4bef471351ee070233b2a7ca97395e1981fb1dbf31da7ccbcdad251e513

  • SSDEEP

    6144:Yv4pofbY8quKmfO0TaCaNNqB13O2/b8spTqC5hTxQ/u8JjFWG2:Yv4p7xPm2B9KfTxUu8JjFg

Score
10/10

Malware Config

Extracted

Family

systembc

C2

mxstat215dm.xyz:4044

mxstex725dm.xyz:4044

Targets

    • Target

      b1da22324541e3de280c13160289986a.exe

    • Size

      444KB

    • MD5

      b1da22324541e3de280c13160289986a

    • SHA1

      71786d8fa931c49e942bfe428aade8a15231852b

    • SHA256

      91735a2a578ca710a1f2e09985ba20079971ee87aa45bfb4b18f4f74a43ce08f

    • SHA512

      a04c5c9f40a6f42c659a8b5056e2d89f0d96175cd0aa76fa875a666abc91dfd52beec4bef471351ee070233b2a7ca97395e1981fb1dbf31da7ccbcdad251e513

    • SSDEEP

      6144:Yv4pofbY8quKmfO0TaCaNNqB13O2/b8spTqC5hTxQ/u8JjFWG2:Yv4p7xPm2B9KfTxUu8JjFg

    Score
    10/10
    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks