Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0ee0fd1549279eebfa63616accb5c6f0.bin

  • Size

    14.6MB

  • Sample

    241107-bcxn2ascrq

  • MD5

    e3c97559da5a5e06d6af059d29ee4080

  • SHA1

    dad3739d0ce864de0830ca62f49806efb8bf58e0

  • SHA256

    d12ac3bdf5a670e3daeb84f0dba66cc88e9612290dc06455dedaed6a5d395f7b

  • SHA512

    dd9a069bbf6d43f317abdbb492c60b260d3b7cbd4ad95fe34f3449528e285109e8bfc3909077ab2500935f6e86c78cbd8820d7e3df8bad72fda31da263d686dd

  • SSDEEP

    393216:+z502LfKlH2XEETC4D7UlLoNC2axMVBHBSFj236IZjN6pUm2/7gih:+Hep2DTHxN7aW/HBM2FN6pUBh

Malware Config

Extracted

Family

spynote

C2

147.185.221.17:5764

Targets

    • Target

      50a6e55d056a71e2c4727743dd38e3c5d0d1ad9abca32db3b43c9546bd19341a.zip

    • Size

      14.6MB

    • MD5

      0ee0fd1549279eebfa63616accb5c6f0

    • SHA1

      b7962c3a23e14019309c3d0ddd20c38cdfdb6dfb

    • SHA256

      50a6e55d056a71e2c4727743dd38e3c5d0d1ad9abca32db3b43c9546bd19341a

    • SHA512

      cae8e7c18065a94fbbe1e5b7baaed36700835a3fefb4d047416cc9bcb76a354565b2f4cb589116762ad09c48367a6c0f69e947b4f87dbabc80747869f26d9552

    • SSDEEP

      393216:+USo++UEBhPQT75d5Zb8RuI1rhMlIPDNQPa0hAcdylFPqC/Dwxd:TdUZ5dTKuMMlILMrjyHPEd

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries the mobile country code (MCC)

MITRE ATT&CK Mobile v15

Tasks