Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
11112222rat.jar
-
Size
639KB
-
Sample
240709-tta6gathjg
-
MD5
18272bd59e43faa5a20e742a2ff63ddc
-
SHA1
9248b48c6de76a5a70a352071bc42e2b8db69af4
-
SHA256
0f17f205f41bcd275cc23a07de38df9886675ff01ced05500cc441f309b73206
-
SHA512
c26836eea2170ded5490fc1e100055627ac187c728e11f822e0e68ddb0156aaf00da222945a5e318ce018f92daf36619022b69b4be77f193c229c4c35e76b153
-
SSDEEP
12288:EvHvQz/FxfKxN4VXATingW/LRr+NV8NGPEgu92Rvm3Qu029cSABDMu:EvPQrXK/4RHngWlCkGPJQ9Qup9fABDMu
Behavioral task
behavioral1
Sample
11112222rat.jar
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
11112222rat.jar
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
11112222rat.jar
-
Size
639KB
-
MD5
18272bd59e43faa5a20e742a2ff63ddc
-
SHA1
9248b48c6de76a5a70a352071bc42e2b8db69af4
-
SHA256
0f17f205f41bcd275cc23a07de38df9886675ff01ced05500cc441f309b73206
-
SHA512
c26836eea2170ded5490fc1e100055627ac187c728e11f822e0e68ddb0156aaf00da222945a5e318ce018f92daf36619022b69b4be77f193c229c4c35e76b153
-
SSDEEP
12288:EvHvQz/FxfKxN4VXATingW/LRr+NV8NGPEgu92Rvm3Qu029cSABDMu:EvPQrXK/4RHngWlCkGPJQ9Qup9fABDMu
Score6/10-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-