Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

1164-141-0...ry.exe

windows7-x64

1

1164-141-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1164-141-0x00000000013C0000-0x00000000023C0000-memory.dmp

  • Size

    16.0MB

  • Sample

    240825-ha1q8szdqf

  • MD5

    706c0a0e8ff2657d56e0152c5d3ab2fe

  • SHA1

    59cfd3a237547d5c020126e4c328b8a43308e36e

  • SHA256

    97b7f74b641c0c95b12dedef6353fe5acfe43c4f88fe76ef9d890de68b5b3738

  • SHA512

    df17181f2b9d67745d9eaf3f69e36e38f83180c6fd5e3c771757ddf617980dd7d06249a36d6d77c5f46d016db48f776bd028d4fbb03f4af44d90f19b61ca7213

  • SSDEEP

    3072:m0s8jr4Mgt4HNkfk5PJURHLuWw5Cz4ULTga:mer4FtgkABU9CZCzrLTga

Score
10/10
warzoneratdiscoveryrat

Malware Config

Extracted

Family

warzonerat

C2

htajsjdh3738828e8dhdjjccbnc.duckdns.org:5574

Targets

    • Target

      1164-141-0x00000000013C0000-0x00000000023C0000-memory.dmp

    • Size

      16.0MB

    • MD5

      706c0a0e8ff2657d56e0152c5d3ab2fe

    • SHA1

      59cfd3a237547d5c020126e4c328b8a43308e36e

    • SHA256

      97b7f74b641c0c95b12dedef6353fe5acfe43c4f88fe76ef9d890de68b5b3738

    • SHA512

      df17181f2b9d67745d9eaf3f69e36e38f83180c6fd5e3c771757ddf617980dd7d06249a36d6d77c5f46d016db48f776bd028d4fbb03f4af44d90f19b61ca7213

    • SSDEEP

      3072:m0s8jr4Mgt4HNkfk5PJURHLuWw5Cz4ULTga:mer4FtgkABU9CZCzrLTga

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks