Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

FOCA-maste...che.js

windows7-x64

3

FOCA-maste...che.js

windows10-2004-x64

3

FOCA-maste...zer.js

windows7-x64

3

FOCA-maste...zer.js

windows10-2004-x64

3

FOCA-maste...FTP.js

windows7-x64

3

FOCA-maste...FTP.js

windows10-2004-x64

3

FOCA-maste...TTP.js

windows7-x64

3

FOCA-maste...TTP.js

windows10-2004-x64

3

FOCA-maste...MTP.js

windows7-x64

3

FOCA-maste...MTP.js

windows10-2004-x64

3

FOCA-maste...Map.js

windows7-x64

3

FOCA-maste...Map.js

windows10-2004-x64

3

FOCA-maste...ion.js

windows7-x64

3

FOCA-maste...ion.js

windows10-2004-x64

3

FOCA-maste...ts.vbs

windows7-x64

1

FOCA-maste...ts.vbs

windows10-2004-x64

1

FOCA-maste...ser.js

windows7-x64

3

FOCA-maste...ser.js

windows10-2004-x64

3

FOCA-maste...ns.vbs

windows7-x64

1

FOCA-maste...ns.vbs

windows10-2004-x64

1

FOCA-maste...ing.js

windows7-x64

3

FOCA-maste...ing.js

windows10-2004-x64

3

FOCA-maste...ion.js

windows7-x64

3

FOCA-maste...ion.js

windows10-2004-x64

3

FOCA-maste...ler.js

windows7-x64

3

FOCA-maste...ler.js

windows10-2004-x64

3

FOCA-maste...ler.js

windows7-x64

3

FOCA-maste...ler.js

windows10-2004-x64

3

FOCA-maste...lls.js

windows7-x64

3

FOCA-maste...lls.js

windows10-2004-x64

3

FOCA-maste...gin.js

windows7-x64

3

FOCA-maste...gin.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FOCA-master.zip

  • Size

    2.6MB

  • Sample

    240713-thedraxeqm

  • MD5

    e449b771892a71f72477e164bc775fad

  • SHA1

    f3df2976158397771c042c2206e1a0a35b287160

  • SHA256

    26cdfe6acc78e5bba97432c946e12a3fa96853a922f36f313adc965e63cebe27

  • SHA512

    fa084bd91e45b67212f2340b7cc7fad57c23505832c1f0d229a970c59f4eff0cbf71aeb63d0135a99d05211e962493c43a3c0dbbf74f8ab401ac9c6fa8898fe4

  • SSDEEP

    49152:y6gpaNmGFcRntj4aujLFaUg3P23I4UBi8lI2mMwgwdP56ZysQheT4dUbp1Ox:y6gpaN7FgntLaFmfrHWTBdB6UreMsvOx

Score
3/10
execution

Malware Config

Targets

    • Target

      FOCA-master/FOCA/Analysis/DNSCacheSnooping/DNSCache.cs

    • Size

      2KB

    • MD5

      f325e2c47a713a2e8e5d3741649090e2

    • SHA1

      4b02924503a56eca2c96322e876a0183b52300e1

    • SHA256

      ce2acbc17819c0763584ab0b63ffbc8b6f99b3b598e450a749aa8172439bcd5c

    • SHA512

      bfcf3574a2351ae568e59eee246a92f390b52c7d6d685c924ac1fa7de9e17c4e3e89ca20db3eac4e64d299a892b9b964419b4d21bc07e0db766b38cb087f8f42

    Score
    3/10
    execution
    behavioral1behavioral2

    • Target

      FOCA-master/FOCA/Analysis/DiarioAnalyzer.cs

    • Size

      6KB

    • MD5

      0bb09ffc8c074b2eefb2fa1573dc1304

    • SHA1

      5801bdd329925ccf7effaf9599d1d30517e107d3

    • SHA256

      1085855d4e5dfe91d5b7295fbb2b8fef9bf48d00e63f9703cdb2bf5b849e7323

    • SHA512

      529797be44c4af19b89e86337bd4407813a15429987012e0d32272e9e4d406352193c4784b8a4d16bb076dd7437a403c748ac9fa345f75e595deca7949f5f449

    • SSDEEP

      192:cedhIoDkifF3bI3RqdR7KCEfNnsn6QyVorVonop3VonwKF9iarSCqyL:pdhJRdUsE5

    Score
    3/10
    execution
    behavioral3behavioral4

    • Target

      FOCA-master/FOCA/Analysis/FingerPrinting/FTP.cs

    • Size

      2KB

    • MD5

      52dfe3cc52587bb8559d1fb035dc7fc5

    • SHA1

      b32169edb22b4fb5b1da17ea4ef88650e9fd106f

    • SHA256

      4dbe4bd00fbf0d074f264b91a62c15461135e7f5de868f522a3457fec47f3ad3

    • SHA512

      704c5251607a9de98f5b31a8943dae2d084388a57c769af9e58257217bcf7c064a49201e3e086e5d786e31e3adc5411e6895c4147db08f813d15f707fedba6a4

    Score
    3/10
    execution
    behavioral5behavioral6

    • Target

      FOCA-master/FOCA/Analysis/FingerPrinting/HTTP.cs

    • Size

      20KB

    • MD5

      7bb1a74d5668c21684c1349199b588c7

    • SHA1

      12f2666e1925c85f3f369e7e2394f60d0d48fa4a

    • SHA256

      b96f48d3cf417f940d376522c5ba0210c900df8657dadbba2bb61219c9ceb639

    • SHA512

      221c2397da38b7e54d042960037f8278b0da453e88a4895506f4a8d6675a8d3e05aeac7f4b8012faf4f050d5a990a45431c83c88d52d7a0b200e569b9f079cbf

    • SSDEEP

      384:brLwXUnZcKKqFKKqERKCSVXMlIQkVgP1mOw6oS2CQ4CWv4:rUgovuKJVgQ/NF

    Score
    3/10
    execution
    behavioral7behavioral8

    • Target

      FOCA-master/FOCA/Analysis/FingerPrinting/SMTP.cs

    • Size

      4KB

    • MD5

      7b3068ce008bed7d07e745b57768d45a

    • SHA1

      e51b3018829127b574d899769dd79cec9759d3bc

    • SHA256

      5292658116e99096e800c57fa9ab59726c11ff3cbf24c15b31785dc1f9171a4e

    • SHA512

      9855deb4e12f54c9930d2dd85edec4f4e8460d6c450ad3f1d73c1606af1e2296374ffb8bb09eb945a5d252f80d2dcaf3e7a4a7e73ebe5955560e8c14d81bdd38

    • SSDEEP

      96:Cj4Y26K8cjS6dQSgHhkRQRdSlL0N8aULgz7EVOI550emL:tFlSeNJRQRdSlg8aIgz7EVOI550emL

    Score
    3/10
    execution
    behavioral10behavioral9

    • Target

      FOCA-master/FOCA/Analysis/HttpMap/HttpMap.cs

    • Size

      24KB

    • MD5

      24f6078b7ca750a6b8ef22ac730320d0

    • SHA1

      58227da48b7f805f44f148e8829331a35ec504eb

    • SHA256

      904172dfc6911f0f012b0ef1d30c6c8fa57247dc7316f5e8ce3153b189c6e878

    • SHA512

      508ddf839e64ba5b420c3ef369f68ccd5c22e7e08507dc1beb9c712c4f0db07a5f1ed505e5b4b88fe00bcff90d25258e4ac7e9c205e5d56d4f1dd156382830f0

    • SSDEEP

      384:6UFQD52DDmId1Oadjt5yFxqrc0WVYfSXCOazaOjddGmPTOKFzM0uL5K9gdHp7aF6:csd1OaxriIzaObGmPTO2YdO3sa6

    Score
    3/10
    execution
    behavioral11behavioral12

    • Target

      FOCA-master/FOCA/Configuration.cs

    • Size

      8KB

    • MD5

      dbd3c39cf792660d9eb8272019663a58

    • SHA1

      454f815406ae97f9bacf6e87ad5c524530906ddc

    • SHA256

      8e198385b479bc88eaacbaa3f6fb1df6235b5b6b496f044ca2533803c59cfab6

    • SHA512

      b95a7b1dc7f660ec593bf64c5722fdc058d1a13467d508e50b17964572d233a429e9d5cf0ea92aadedb20acb2f8171541721b5d5332b4fa8acbb0aa22ed55933

    • SSDEEP

      96:Aj4Y26z8HjucYhlcMqUrQ9SblaP43V7k3sxGiZgmwJWI:nFw8DjYjJbQ9BPIk3AZgmwJWI

    Score
    3/10
    execution
    behavioral13behavioral14

    • Target

      FOCA-master/FOCA/DNSDictionary/hosts.txt

    • Size

      44KB

    • MD5

      54339c9664095f8dfa7976bb3a6bb57c

    • SHA1

      5601a0a3fd3473ba1e17925e83411fda6b218d46

    • SHA256

      35d355f7c68b384737cfbfe0b23264aa1bdaadfc1e1d26d3e5c336b87ee3012a

    • SHA512

      ec7aba2a98ff94af8cbe24c06e5fdf97e7654b201d27ad207ad539ae72541bca957254db91b000397c1c4095ada70c747dfc32eac0802a140e1f62fa29c52e7b

    • SSDEEP

      768:TaIT7DAp8X4pSEdBZaXwiEl5wt4R6zaF9qHZyjsjYM2gbQiQX0afUAnfM:TVT70VpjZaXwiEl84R6u/FjsMMjQNzfc

    Score
    1/10
    behavioral15behavioral16

    • Target

      FOCA-master/FOCA/DNSEnumeration/DNSDumpsterParser.cs

    • Size

      3KB

    • MD5

      7050d422542d5c3ac4035f70327dbf89

    • SHA1

      dc5187e50c1b92939249eb347ab8c080b1caadc8

    • SHA256

      45e1fd4824ace2cd36c8c04d4ba308f5941e7e2b69f732074dc69bf64fc1c8bb

    • SHA512

      5682661f8bf4e42439ece13a1a44c595c7502f28ecb4193411288fe41ab0914892822fb5a5643b8cbbb8cad9c278d67c1145fa29b4ce79433f2e90ef505a37f7

    Score
    3/10
    execution
    behavioral17behavioral18

    • Target

      FOCA-master/FOCA/DNSEnumeration/PanelOptions.resx

    • Size

      5KB

    • MD5

      44240faa83a3330294a6247e51b1d3df

    • SHA1

      b592de3a76a376812c928a9702c06223dbdd01d1

    • SHA256

      15a243ad10a85ba25a5e0bc3945dec2b66da6f481594a9f4cdc9310c078a9dc8

    • SHA512

      16223a64102727cfac31e8c809525cd774dca1b372c4e95c57a436deb64abc62f0d8d160c66d739d20568e02585d9314aba1cf75c6e8503300c3627db7ddee6f

    • SSDEEP

      96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFC3qxdRMvDbu8KsrbEKAy202lU7:Zf+tLPfYnLvFVOiFQaUD7U/s+

    Score
    1/10
    behavioral19behavioral20

    • Target

      FOCA-master/FOCA/DNSEnumeration/PanelSearchIPBing.cs

    • Size

      2KB

    • MD5

      4108311eb395bf1ed01357b6104b3415

    • SHA1

      0417315557c908cae7d232a8555e06ae64f395e6

    • SHA256

      c969cb0bfb589f0abb259949be9c8dc84e1bed535f873dfb464e5bc59c8d199a

    • SHA512

      10554877356cf4dab406b7983a1311cd41c159c14ae95a79e9427a23fdb539b651a0657e4ad943af2e57ce1865c948b42b80fce30642bd783d097c4d4da687da

    Score
    3/10
    execution
    behavioral21behavioral22

    • Target

      FOCA-master/FOCA/DNSEnumeration/PanelWebSearcherInformation.cs

    • Size

      2KB

    • MD5

      94117bd303807d79bdfba98d77898c5b

    • SHA1

      c19396e7e920bc55716c1f8e26c311378c7d2e44

    • SHA256

      1983fb7b0c0e6d336b96d4037b2bb29d2ffb76920ad43d68fff675b1b3ceda20

    • SHA512

      9c35071fbfdf21db996be943ff9340e666bab7130c5d1cd2ed36a8a5817b97b0b6de927c8814d044d36bec79df0dd71f8a64a1aa54bc633dd3291dd902a89524

    Score
    3/10
    execution
    behavioral23behavioral24

    • Target

      FOCA-master/FOCA/Database/Controllers/ComputerDomainController.cs

    • Size

      647B

    • MD5

      b32cc7d6f9552fb5c2470e25170a5cb1

    • SHA1

      e6dff888a249838d170412cbe2ff87bbb1360bf8

    • SHA256

      ea8667ed12825b481e6e20115cef176a77e0ba96301527a3201c25d3b9d5d208

    • SHA512

      dbf20b438e855a072587ae0b913ca3f6972d9a24b92f98de43005e8a7a055d795a41c36b09ccaaa42fef4c206e5bb87886536083d188e4ba8480c76e9b072b50

    Score
    3/10
    execution
    behavioral25behavioral26

    • Target

      FOCA-master/FOCA/Database/Controllers/ComputerIpsController.cs

    • Size

      621B

    • MD5

      3f89e58aa3c38960c56f46817e5b5862

    • SHA1

      18f9bbffbf304faaa3cda79cfc3b056c97c22e57

    • SHA256

      9d391db8e1db243220afd090dbcd7cc499f4323283527f78f28ef71dc8218536

    • SHA512

      398783e8b85254a32d856c4acbd17639528a20af035faf10bf77665f40b1407aa43e008f492e47683639eb2f76d46fbff787de9abd1c5c006098cfa5b7aaf5c8

    Score
    3/10
    execution
    behavioral27behavioral28

    • Target

      FOCA-master/FOCA/Plugins/ManagePluginCalls.cs

    • Size

      15KB

    • MD5

      9910d2df846cba74eb3187065622d27c

    • SHA1

      ee2e7ae66ab2fe16b946bb728e6fb4f51f59c2de

    • SHA256

      6d6bf9ee2f222f6c778a4c33b446188589068ef235540611b9835145bdf3aba6

    • SHA512

      b0803926cc2fede0911f10ab686406b64257e95f54c23ea54617b1ec23f4afba0da4a343026f71d5a8856760f2649c93feffed3408fed924f1a6773ff73dcb26

    • SSDEEP

      384:JAsmrQQaoWCwkYYYUoYkxWw2ADjpyVzOaH8Rhoto4sieXr5:Csm/s7

    Score
    3/10
    execution
    behavioral29behavioral30

    • Target

      FOCA-master/FOCA/Plugins/Plugin.cs

    • Size

      6KB

    • MD5

      450b325155876177e1785f8c9f706694

    • SHA1

      9cae95c1ba02cb6a3ee549bd2697161aa6882fe3

    • SHA256

      ae4474d5cc7baa3421be9bd698b2890255c3f3e98617e0bb5d5db7a09ad6c56f

    • SHA512

      09969e031fb99fadc03f8d11e34b962b7aff8c3bdcd582ab1245aa85947e3595943a22190343bc6d531246bd1a081e953bac83bc5efc54b2fc48046b8f846b7d

    • SSDEEP

      192:zLstRpt+tNF6dShJHSKKlXzdHPrxQjfefFfufefeW37HgLBimkCgb:HstS6dkS1lXBz2jWt222W37HgLBim4

    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

execution
Score
3/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10