Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    800db38033858219c82c0ac0594045e2986ebcb6d2aabc563cf59e5fb7fb39b2

  • Size

    278KB

  • Sample

    231220-dvbkmahgfj

  • MD5

    870ed1c96fb52d589c64cabb33144823

  • SHA1

    60d49bc479f07c8d55c337193c37185434b4838d

  • SHA256

    800db38033858219c82c0ac0594045e2986ebcb6d2aabc563cf59e5fb7fb39b2

  • SHA512

    48646682d5dcdfc9fc0cb75f983368cec024bd0bbbbc451027e93d72289d4fc9693751a9a5de54867c753d9f7966cdc77951b9db8d11d8201140af8cb6514afc

  • SSDEEP

    6144:fvGgSumMpNpaBq98iEeCfGTWr4ADDcESk+cpzqjR+Bo8/y5+y:WfZMjAqenFfGScQDcESkyjsC5+y

Malware Config

Targets

    • Target

      800db38033858219c82c0ac0594045e2986ebcb6d2aabc563cf59e5fb7fb39b2

    • Size

      278KB

    • MD5

      870ed1c96fb52d589c64cabb33144823

    • SHA1

      60d49bc479f07c8d55c337193c37185434b4838d

    • SHA256

      800db38033858219c82c0ac0594045e2986ebcb6d2aabc563cf59e5fb7fb39b2

    • SHA512

      48646682d5dcdfc9fc0cb75f983368cec024bd0bbbbc451027e93d72289d4fc9693751a9a5de54867c753d9f7966cdc77951b9db8d11d8201140af8cb6514afc

    • SSDEEP

      6144:fvGgSumMpNpaBq98iEeCfGTWr4ADDcESk+cpzqjR+Bo8/y5+y:WfZMjAqenFfGScQDcESkyjsC5+y

    • XLoader payload

    • XLoader, MoqHao

      An Android banker and info stealer.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Acquires the wake lock

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Matrix

Tasks