Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    OTP Bypasser v1.zip

  • Size

    25.5MB

  • Sample

    240410-xhmlxabf3y

  • MD5

    d10faea83e33aa3c30b7ecd4c3d8b926

  • SHA1

    60f916639dedccf6c162f076a875df555bd21f1f

  • SHA256

    5cda40c8d073b366241fa8b80ee7f7be7f721daf2231e544e78e0d63f56356c4

  • SHA512

    61dc1e7adbb105eb13ac8930056521aed616cf7525c0e22fd9a77a297a7824632b0d1886ae5ae2f11df170a97ca738ea42b32d2abe3a172e61d6a17f978c9a67

  • SSDEEP

    393216:xd6N6b2sGH++m1tBDpFZXocXRLucoVykpqVIArZV4dptvkVN588NS1T0iwy:xdEs3pFZJB6coV1AFV2DkVN/mey

Malware Config

Targets

    • Target

      OTP Bypasser v1/bin/pip-diff

    • Size

      3KB

    • MD5

      2393a62538643c510172f776e31b27a3

    • SHA1

      d3827cf1d0802582cc3f9b8a628d25c30d332202

    • SHA256

      ef7eb52483e5608738ad700b692f4f6c22d51b8fa5c4751246b6c62a29341218

    • SHA512

      4b4067bd14c590f83aecac2a0b74fbb6555bc732df75f67704bbe549e18e33dc07fffa1ea328a5ed441b128a206781d20410727237c46e1bdc5376d57d14f42d

    Score
    1/10
    • Target

      OTP Bypasser v1/bin/pip-grep

    • Size

      1KB

    • MD5

      f08590b0443e5eec2860c3ece1619ef0

    • SHA1

      94f14cb51e6efb0beb55964d184413b6311e4bf9

    • SHA256

      573519cd151d74da218a68a65d8fc38dac335688d7710c262ca6b5acd8c82e38

    • SHA512

      2f7689613c63b78fc5cbadc4ec11f8ebfce9ef18952068140d2cd15fa29d4f9832f973937e4232d04cac9b7169ceaa5a94daebb73bd13aea3b54c27410de340f

    Score
    1/10
    • Target

      OTP Bypasser v1/login.exe

    • Size

      48.9MB

    • MD5

      3f021a743dfffaf6339507e764e11852

    • SHA1

      4a95d0a84fb633a715ff0db83c9b56db5a592a70

    • SHA256

      faeb443e13fda78ba26820c2be59d32ee1d7d59c0a9ead6978d2e113bcd25461

    • SHA512

      541eb6d6a8552947c552a20072292ce8c9c106b91b3e0ad6062b47a444d53e4b77ec4f9fbc173f32b3d5da88a5b0a7aaa4a25cd2ddb8f61c5ec816e8d5ddc9aa

    • SSDEEP

      393216:C94n6eQnJVgetJBRrnlPSa7KvMwGs4zGbdd7BRo:C9mQtrnlxmUNcL7v

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target

      OTP Bypasser v1/setup.exe

    • Size

      6.8MB

    • MD5

      fe54252e4c4478026cad14f5325868c6

    • SHA1

      29c48f94978b19dc17eb4073098df0db8fe83fc5

    • SHA256

      aa394718a5dd2fae8ae1eaa9b880c5461ad886f3a41fc1443349a582083c7b1b

    • SHA512

      7d2388361de1c0ba256b303e60e38eb431ff0fa6ce1a2881b97b50b9d750f4a664e95efc91739107a42b8f8d7748852c17d32893ca5d2a3143c2fbfa8501312d

    • SSDEEP

      196608:EsV1Y7B6ylnlPzf+JiJCsmFMvon6hVvvJD:kBRlnlPSa7mmvo+JD

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      )-(��.pyc

    • Size

      1KB

    • MD5

      6c902f9f00fd0f8771bbc494567a3d0d

    • SHA1

      966db1c4a74935d2d4252f8503fbf2bdb81a1c22

    • SHA256

      409e14d1250be8a2c20fd05c959023bd27f6d6d85fa3b94a9bde43f16cd22735

    • SHA512

      a1906f31f69e78e2e6a22a8613238d56069e7c3028fe5664ee9e377820f06195d1d0fae71ea288f3c13fd0addc5696898e4fa5332552c7468c939d76a4452545

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks