Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    42d05c75286bcfaff3d1721d813f182b.bin

  • Size

    2.8MB

  • MD5

    54082c9354443f71649b4b2889a64d53

  • SHA1

    a62d0f4bea517662711acb57365ab8b2a61a8134

  • SHA256

    785959672137b57921a8df496d515be7877df33f09c7053cbd53fa0bf0fddcd3

  • SHA512

    334795898b23207a1815deb582eb2fc9e44836b7269d338b2aa240e67c7794e805a3a0205c6b371b66d454d7db8ce9f83ed3bbe773f557013b6a40eca3b90c9f

  • SSDEEP

    49152:aB4X+fnOFvhsLGXj4fF6Ed0KmVEnSdznqGRURPKeOAoUirv6HaRyYBXXTf+mD11i:84X+vOJhtXcSy27qGkvOeiryHaRycTNa

Score
10/10

Malware Config

Extracted

Family

spynote

C2

sign-develops.gl.at.ply.gg:45220

Signatures

  • Spynote family
  • Spynote payload 1 IoCs
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 15 IoCs

Files

  • 42d05c75286bcfaff3d1721d813f182b.bin
    .zip

    Password: infected

  • 20bfd2b2466fad95b88cf5067b29a0dbabf5016ccbffbb3a672c7366b8ec7dfb.zip
    .apk android

    Password: infected

    guild.arts.seeking

    guild.arts.xzkrhgwfgsatladhtdqmetnghncazvrjmlhcgbltymurubhzae2.fchnkwxnaafrhommlakvoeofaagcfqtykruqeczahsqenqhmhe6SJTMB87