Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Nicht bestätigt 961354.crdownload

  • Size

    20.5MB

  • Sample

    231113-rjwnbada6t

  • MD5

    e90c068938f94007bb753a5360f71935

  • SHA1

    8467f19d0eee8bf2eff1b05d23dc6a23fef091db

  • SHA256

    d332de690f202780e5bedbaeeafac4d45a1d8a02e0d8267a5603d452ee7c1b07

  • SHA512

    f4f8d24d68d4179fc626d5a6cfbbd8adfb8c714876e5889d35b6a5fb54222fc042a6e95daf0fa60ae9da51d62f208d48cc08b42e16992af678e9d1b8594263bc

  • SSDEEP

    393216:5Wvz+XOVzpICtL+9qzTfgD7fEUyIeY/Vt1WomY:Ez+XOxKA+9q/fq7fEbITpmY

Malware Config

Targets

    • Target

      Nicht bestätigt 961354.crdownload

    • Size

      20.5MB

    • MD5

      e90c068938f94007bb753a5360f71935

    • SHA1

      8467f19d0eee8bf2eff1b05d23dc6a23fef091db

    • SHA256

      d332de690f202780e5bedbaeeafac4d45a1d8a02e0d8267a5603d452ee7c1b07

    • SHA512

      f4f8d24d68d4179fc626d5a6cfbbd8adfb8c714876e5889d35b6a5fb54222fc042a6e95daf0fa60ae9da51d62f208d48cc08b42e16992af678e9d1b8594263bc

    • SSDEEP

      393216:5Wvz+XOVzpICtL+9qzTfgD7fEUyIeY/Vt1WomY:Ez+XOxKA+9q/fq7fEbITpmY

    Score
    7/10
    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target

      Gengar-Woofer.pyc

    • Size

      69KB

    • MD5

      407059d6ded69e6246e4d3cfc18d017c

    • SHA1

      dd73db2f8a43504eecdc5cccc408d6873ced2f9b

    • SHA256

      aba29b7d54b9c53d5e6d1e527ca1f819dfc649fd1f2a3ff0960e132e2b3cbf7c

    • SHA512

      9bf8276c3c4f0f70e619705c10868685317b4a49384f644c0894a0b8ef6f259502d120bdd725521ec76807825470d52a3f790e5c42d404b229963f7c854f000a

    • SSDEEP

      768:058S3Irw/gMxvCWUL8OsvPi3K2nFcWAXTxcPdCA79/GleK1AnjdRnrBIvy:0XIrYv+SNxjlJKpVrJ

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks