Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5c1d77dc5f69f13954cf21c3f34c957ede55c236f19542f72cc8ae71e4adde80N

  • Size

    364KB

  • Sample

    241016-dl6peatfmm

  • MD5

    fea8d8837986b3323b4984f1db4cf540

  • SHA1

    f6d7a9080facd3bcd1060b89ba4a2d9560f0c316

  • SHA256

    5c1d77dc5f69f13954cf21c3f34c957ede55c236f19542f72cc8ae71e4adde80

  • SHA512

    4332d1ce3ca1659c983c6e777608ac177e39e5b8dee303051cf176e4e2ebbbe68407909896282d87b58bd596611ecfb5e4237c34e0a73e5787f007d86b96bb13

  • SSDEEP

    1536:i+dtzXF8CvrJ4PBhDP35+6h/lProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:i4th8k6DP3A6h/ltOrWKDBr+yJb

Malware Config

Extracted

Family

gozi

Targets

    • Target

      5c1d77dc5f69f13954cf21c3f34c957ede55c236f19542f72cc8ae71e4adde80N

    • Size

      364KB

    • MD5

      fea8d8837986b3323b4984f1db4cf540

    • SHA1

      f6d7a9080facd3bcd1060b89ba4a2d9560f0c316

    • SHA256

      5c1d77dc5f69f13954cf21c3f34c957ede55c236f19542f72cc8ae71e4adde80

    • SHA512

      4332d1ce3ca1659c983c6e777608ac177e39e5b8dee303051cf176e4e2ebbbe68407909896282d87b58bd596611ecfb5e4237c34e0a73e5787f007d86b96bb13

    • SSDEEP

      1536:i+dtzXF8CvrJ4PBhDP35+6h/lProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:i4th8k6DP3A6h/ltOrWKDBr+yJb

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

MITRE ATT&CK Enterprise v15

Tasks