Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

FluxTeam.zip

windows10-2004-x64

7

Resubmissions

09/08/2024, 17:15

240809-vsxthsxbkh 7

09/08/2024, 17:06

240809-vmkxrstamj 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FluxTeam.zip

  • Size

    34.3MB

  • Sample

    240809-vsxthsxbkh

  • MD5

    eaa845a8cabd9e13151786580b122e99

  • SHA1

    460d005a4cac062a86552977ff6b7bb2f95c02e2

  • SHA256

    90c069f975f125e308ec1da2e0789da2e963d277186e5ace1348f77aba445650

  • SHA512

    c5a39b3b4b1462e537a811738438a3397005da0620e56474165246ead33c0663c571a3f35ad632f79baa62ed2bf54ffb08ebf53d8a48d269339c7e6c2fb5d007

  • SSDEEP

    786432:CjyaAFZvok3gA/rbFy0Uf0dmAPNoDAyD8nJ3dnXqEOHsy/TZ:C2a+ZvosgA/Ny0Uz0oDAC8RdIHfrZ

Score
7/10
discovery

Malware Config

Targets

    • Target

      FluxTeam.zip

    • Size

      34.3MB

    • MD5

      eaa845a8cabd9e13151786580b122e99

    • SHA1

      460d005a4cac062a86552977ff6b7bb2f95c02e2

    • SHA256

      90c069f975f125e308ec1da2e0789da2e963d277186e5ace1348f77aba445650

    • SHA512

      c5a39b3b4b1462e537a811738438a3397005da0620e56474165246ead33c0663c571a3f35ad632f79baa62ed2bf54ffb08ebf53d8a48d269339c7e6c2fb5d007

    • SSDEEP

      786432:CjyaAFZvok3gA/rbFy0Uf0dmAPNoDAyD8nJ3dnXqEOHsy/TZ:C2a+ZvosgA/Ny0Uz0oDAC8RdIHfrZ

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks