Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    womsz_python.zip

  • Size

    14.2MB

  • Sample

    240905-xlgj3ayajg

  • MD5

    fe67b4faf0d474baed0221e9394e71f2

  • SHA1

    c0dd43ba793c2786878971e3b832b0843e6b39ba

  • SHA256

    3758a12f5571cefe41a15dc64b496df2900df304edc50a2b44c995e868a30dc8

  • SHA512

    222b38be38534515a7655a11c1f1ed11c5fa14e5ded88025840587fffcaff60ae016a858949ac77c1dc4c1b4634de093638b0ee6aeb815f686ded797a1a519a7

  • SSDEEP

    393216:IjbtCyTlQpLaH9k2euTVT5RrUNlvJdgR/oOI+Qpo3:8RLT2FadkbU95RrUPBewOx+A

Malware Config

Targets

    • Target

      womsz_python.zip

    • Size

      14.2MB

    • MD5

      fe67b4faf0d474baed0221e9394e71f2

    • SHA1

      c0dd43ba793c2786878971e3b832b0843e6b39ba

    • SHA256

      3758a12f5571cefe41a15dc64b496df2900df304edc50a2b44c995e868a30dc8

    • SHA512

      222b38be38534515a7655a11c1f1ed11c5fa14e5ded88025840587fffcaff60ae016a858949ac77c1dc4c1b4634de093638b0ee6aeb815f686ded797a1a519a7

    • SSDEEP

      393216:IjbtCyTlQpLaH9k2euTVT5RrUNlvJdgR/oOI+Qpo3:8RLT2FadkbU95RrUPBewOx+A

    Score
    1/10
    • Target

      fotosy/apple.png

    • Size

      301B

    • MD5

      6fc7ceb9e9cc9a45d37e261fe0904d69

    • SHA1

      dc1de5f593d1d185254991f4342afaed6e6c406d

    • SHA256

      10e6d4f94473a0ae1dbe604e06bd66eba0dc574a5539c235bf642ba442d594fb

    • SHA512

      4ceac8217620c37ed2f9351d65fa000cc7af27964471a01f85de05268d27a1ecc24370b7060929f24862a52996a9f06533cfc656d12f9c0f57e485012089a4e3

    Score
    3/10
    • Target

      fotosy/background.png

    • Size

      372B

    • MD5

      ca604ea10c17073b8f2a3bda0e120635

    • SHA1

      d452e6f5d68dceb47f6ab173264effef2ea5fbd4

    • SHA256

      cfa59957eb4e7cb3988cf4ad015dd74b2657cead12928a91e201418fef94c579

    • SHA512

      54c506945bcd8b023c8a1f7ecbd8451d23ae2739572eb5c5ebc5743f1af47a6ede1dd6cd2a3c731c9a9815b1d9f349fcd2b8c21d07ff0516d235372b5131ecff

    Score
    3/10
    • Target

      fotosy/head.png

    • Size

      278B

    • MD5

      24506b27a576482a352da70c56152010

    • SHA1

      1865236f269152b48982ab107d207729c8734606

    • SHA256

      aa0947f68f4696c7e554d0244e3c0488520719112ac6a8a6605ade75ada443a6

    • SHA512

      2593e27d4b3c7c24cd56b95d61006c0acd98c0cf371ff375cda35e1c512bfcd2a322dc367b184d97701da7ba4e472ad7df895004a456e63746937c2bc4b0430d

    Score
    3/10
    • Target

      fotosy/segment.png

    • Size

      212B

    • MD5

      5aa6a8f60dda5d3fc631b897f13a343d

    • SHA1

      9b5b9cf83958836de31631d5b73cc43c688185b0

    • SHA256

      03a65b5a4aaf40177d48a30a36766b35ac8b6c3fe457704df6df0fe8ce807133

    • SHA512

      759b74cb086bd7e7b0dff0c6ce66380da2e232ef671716fda7ff763ab59154605a10dcf2454b0768571f4f7759815c5a1d663d7767f20ad2f8c280492d39ea8c

    Score
    3/10
    • Target

      womsz_main.exe

    • Size

      14.4MB

    • MD5

      4b79c976e5ec7be6346c46e84202f74a

    • SHA1

      06af2a8d68d98d81319a4c6aabd8c1fcdf576e46

    • SHA256

      866b38e2a8bf10bac9afb26b3e7e02dcd631882155c5b6e04ec7a95f40f8f94e

    • SHA512

      b8d1afdea4245db35c060e84f1e45f85e4dcf40e0860f3f0f1893e9100f5358ec64d9ab40205b549ff9853aa4cda9a6b1c1a9b2ca161eba6c75aed084f1c4f28

    • SSDEEP

      393216:rPDdi8AT61+TtIigeJ3YPDdyETpvB5IjWqkzCi:rPJjAO1QtIbS3YPJyEN3ILj

    Score
    7/10
    • Loads dropped DLL

    • Target

      womsz_main.pyc

    • Size

      4KB

    • MD5

      a65dfcc4a59c43827962e7545d67f32b

    • SHA1

      f8bd6d7d542024840a3fad053ffa02f79441faaf

    • SHA256

      0f882947bde8b6f73dd11b6304a1b5c59c8d128baac611d620d6dfe8000f01b2

    • SHA512

      796a8416f39bafd121341da04f2695ffb689243bd5edd98ff027e3ffbfc205d800bc35d0d4f2c7c25b5b3373eb49c77214fe98877798ae087dc473b4a90f052a

    • SSDEEP

      96:Wqb8p0zDOM+dshn1urX/D0kjSrjfz+/6hk:W03OM+duC++S2

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks