Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Lunar Spoofer.rar

  • Size

    17.5MB

  • Sample

    240103-eecnesefe6

  • MD5

    48fd699e9cba54f5c9fb09a3d362aedf

  • SHA1

    f130049b001902d7fcad58f13d6b47f0d055acca

  • SHA256

    4ee66020bf8fd5606f1fa1835a6c2328aab1556035e44a2de60b87c8f8571375

  • SHA512

    7e80794fb6d765ef42236c4fa16a53f817df2a163e944a31513344c1d74379a1ca5df02eafd188294c65b39c47db7d748c30de58ae95693bf161216bcb67e6a8

  • SSDEEP

    393216:1vAMSV/Hy1IrjMr8wyVQvm21KpM1pfWbQVjxm3rYR:1oPyOkwBCpK6WsVtm3rC

Malware Config

Targets

    • Target

      Lunar spoofer.exe

    • Size

      17.7MB

    • MD5

      307c9c8d33c5e29dedbdfcefa76fb08f

    • SHA1

      412d4dfde8ce9c5ae4cbaec828a7b7d75e9ca85e

    • SHA256

      ee7be92913e679dd66d5a5a62cc8b78a4093da9344cce8ab7058fc8e6ea766c4

    • SHA512

      278ecaace8468273c9ec6eb47f8435e31cb4525124dd9e0142f49e3825a23d5fcb95b4e9e17a74432c2f5dd3d9b736c4009f0d59d952ff0c01429416cb394245

    • SSDEEP

      393216:gqPnLFXlrVgQpDOETgsvfGzugNsxqvEiA/IQGL7Sq:hPLFXN6QoEx2sZiykv

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks