Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    clicker.exe

  • Size

    30.0MB

  • Sample

    231117-st6rpsbd2x

  • MD5

    6c6574aec86c4cdc89747800e13e4b56

  • SHA1

    ba4948adc4616e1ed0ac6b161d97ca670b6726d6

  • SHA256

    5f119f0992ec733f0233f89781ee52beb8d8d2b4d98c376acaf489b3c2044a27

  • SHA512

    1930a99267d84a02ae0be767f47168399d5b052f75080b20c694c688743d2b2a21889c6b7db791a49808e1ff6c1849b94bdaff51d2134105fe9b12bd9f836b80

  • SSDEEP

    786432:nooHOW5ud1h/fyVmCyi1UlcAhYXKY6e7wB9nmOXLZKt6r:TZsdjXyVQiqlcAiv6kwvnT

Score
7/10

Malware Config

Targets

    • Target

      clicker.exe

    • Size

      30.0MB

    • MD5

      6c6574aec86c4cdc89747800e13e4b56

    • SHA1

      ba4948adc4616e1ed0ac6b161d97ca670b6726d6

    • SHA256

      5f119f0992ec733f0233f89781ee52beb8d8d2b4d98c376acaf489b3c2044a27

    • SHA512

      1930a99267d84a02ae0be767f47168399d5b052f75080b20c694c688743d2b2a21889c6b7db791a49808e1ff6c1849b94bdaff51d2134105fe9b12bd9f836b80

    • SSDEEP

      786432:nooHOW5ud1h/fyVmCyi1UlcAhYXKY6e7wB9nmOXLZKt6r:TZsdjXyVQiqlcAiv6kwvnT

    Score
    7/10
    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks