Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9617c02428e411345eb144feb0dac775

  • Size

    242KB

  • Sample

    240212-dpjztabf2w

  • MD5

    9617c02428e411345eb144feb0dac775

  • SHA1

    3b18bd2f81b749f2b4f2bed6cc1d60db7d434ed0

  • SHA256

    de7c0b7aa3009905f81e7d2dbf9a715c6f2d8503f8c5c946ce156fe0f7529d0c

  • SHA512

    69af23a3d93feaf0261f72a813552ed0511d2f8e466ee5f2eb3da9a03db788cd84ebbb75bfb910643f53bce68a58a85cecedd2041ae8f077026128465ef441c0

  • SSDEEP

    6144:arezMySF6ymJNNDgq2L4LlcwFhR2hMX/DWEWk4SJFr:arc4FxmJrr2LicwlcMX/DWEWCJt

Score
10/10

Malware Config

Extracted

Family

gozi

Botnet

2500

C2

app.flashgameo.at

apr.intoolkom.at

r23cirt55ysvtdvl.onion

gtk5.variyan.at

pop.biopiof.at

l46t3vgvmtx5wxe6.onion

v10.avyanok.com

free.monotreener.com

sam.notlaren.at

Attributes
  • exe_type

    worker

  • server_id

    580

rsa_pubkey.plain
aes.plain

Targets

    • Target

      9617c02428e411345eb144feb0dac775

    • Size

      242KB

    • MD5

      9617c02428e411345eb144feb0dac775

    • SHA1

      3b18bd2f81b749f2b4f2bed6cc1d60db7d434ed0

    • SHA256

      de7c0b7aa3009905f81e7d2dbf9a715c6f2d8503f8c5c946ce156fe0f7529d0c

    • SHA512

      69af23a3d93feaf0261f72a813552ed0511d2f8e466ee5f2eb3da9a03db788cd84ebbb75bfb910643f53bce68a58a85cecedd2041ae8f077026128465ef441c0

    • SSDEEP

      6144:arezMySF6ymJNNDgq2L4LlcwFhR2hMX/DWEWk4SJFr:arc4FxmJrr2LicwlcMX/DWEWCJt

    Score
    1/10

MITRE ATT&CK Matrix

Tasks