Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    server.exe

  • Size

    627KB

  • Sample

    240711-jdsqgayckc

  • MD5

    1053d5bffab97a683ee4fd76d5e04674

  • SHA1

    f19a8c327a3ddf4298676136d970250f7561da1b

  • SHA256

    eb8795fd32bcdbbbfd8482bdaac6d130fc09a4a157887ec4c04feabff376219c

  • SHA512

    1cc0f5c5ad47efa7788dde43af0395f97dcbd20f2290d94e0f5a0d46e6f7a47fbc52e2aa5d37498f8cc2ed01bb36acaf0b1ca1abeb2e3cf173b0764d6224bbdf

  • SSDEEP

    12288:lOqvQomCg4G6q90tmPvj+GU/ttJuqwh3EQiXRUVZs4ixsiNhkApRawP:xoovgbAKvBgtJuqwh3EQihUb1ifNhj

Malware Config

Targets

    • Target

      server.exe

    • Size

      627KB

    • MD5

      1053d5bffab97a683ee4fd76d5e04674

    • SHA1

      f19a8c327a3ddf4298676136d970250f7561da1b

    • SHA256

      eb8795fd32bcdbbbfd8482bdaac6d130fc09a4a157887ec4c04feabff376219c

    • SHA512

      1cc0f5c5ad47efa7788dde43af0395f97dcbd20f2290d94e0f5a0d46e6f7a47fbc52e2aa5d37498f8cc2ed01bb36acaf0b1ca1abeb2e3cf173b0764d6224bbdf

    • SSDEEP

      12288:lOqvQomCg4G6q90tmPvj+GU/ttJuqwh3EQiXRUVZs4ixsiNhkApRawP:xoovgbAKvBgtJuqwh3EQihUb1ifNhj

    • DarkTrack

      DarkTrack is a remote administration tool written in delphi.

    • DarkTrack payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks