Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7bdbcf3b36e2e61841c93b48edc8a749

  • Size

    2.7MB

  • Sample

    240128-cfq64ahae3

  • MD5

    7bdbcf3b36e2e61841c93b48edc8a749

  • SHA1

    8e4120ff978c1c9af1686756da77b73a169d0b11

  • SHA256

    82b789888308b9bb3a973d62d8e8d00141a293d91f94d37cf896567f2ee78345

  • SHA512

    7b0d2f294c3bed45bdae17097dcbf4aeb4b51c93357bc022d39967092466e848614fa668c4a676c053bef1c2d9a7a41d9dc08b6707ffd1c6151d01ced19e4b1a

  • SSDEEP

    49152:dOFj3o9byZnteaU3GyNHZyJ8yct0QFX9m4SjHIpZL8K/xxYy/GXPcSv2wKLf:dG3o0tHUtN5y2t1X9mNopZBkESv2wKLf

Malware Config

Extracted

Family

gozi

Targets

    • Target

      7bdbcf3b36e2e61841c93b48edc8a749

    • Size

      2.7MB

    • MD5

      7bdbcf3b36e2e61841c93b48edc8a749

    • SHA1

      8e4120ff978c1c9af1686756da77b73a169d0b11

    • SHA256

      82b789888308b9bb3a973d62d8e8d00141a293d91f94d37cf896567f2ee78345

    • SHA512

      7b0d2f294c3bed45bdae17097dcbf4aeb4b51c93357bc022d39967092466e848614fa668c4a676c053bef1c2d9a7a41d9dc08b6707ffd1c6151d01ced19e4b1a

    • SSDEEP

      49152:dOFj3o9byZnteaU3GyNHZyJ8yct0QFX9m4SjHIpZL8K/xxYy/GXPcSv2wKLf:dG3o0tHUtN5y2t1X9mNopZBkESv2wKLf

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks