Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    72f4e82a3964b832bfb7552cb8ca28766393a63e95097b047b12a8b61226aa73

  • Size

    278KB

  • Sample

    231220-ak2ghsbdcj

  • MD5

    27dbd2255bb4bc07bffd903f5b60f7ce

  • SHA1

    be440ae25aa1aefb2d077f8adc830f31b55273ad

  • SHA256

    72f4e82a3964b832bfb7552cb8ca28766393a63e95097b047b12a8b61226aa73

  • SHA512

    86227ae0ea19a08beb18bf8083347afcb3a8fe25eb299427e7c8551a38a94672d7240a03cc6e10912e020cf02c2f50799369033aa761273fad00d24ee485fb9a

  • SSDEEP

    6144:X6E/1/GCzUiyiuguhZNt6E0PxYrBxnf7Ucpzq9R+Bo8/y5J:qu1rzKhZtEPmRc9sC5J

Malware Config

Targets

    • Target

      72f4e82a3964b832bfb7552cb8ca28766393a63e95097b047b12a8b61226aa73

    • Size

      278KB

    • MD5

      27dbd2255bb4bc07bffd903f5b60f7ce

    • SHA1

      be440ae25aa1aefb2d077f8adc830f31b55273ad

    • SHA256

      72f4e82a3964b832bfb7552cb8ca28766393a63e95097b047b12a8b61226aa73

    • SHA512

      86227ae0ea19a08beb18bf8083347afcb3a8fe25eb299427e7c8551a38a94672d7240a03cc6e10912e020cf02c2f50799369033aa761273fad00d24ee485fb9a

    • SSDEEP

      6144:X6E/1/GCzUiyiuguhZNt6E0PxYrBxnf7Ucpzq9R+Bo8/y5J:qu1rzKhZtEPmRc9sC5J

    • XLoader payload

    • XLoader, MoqHao

      An Android banker and info stealer.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Acquires the wake lock

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Matrix

Tasks