Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c6d701287fa8b065989ef6f157b47249866d56ad857f296ccfa2c3745a3fe4a8

  • Size

    5.4MB

  • Sample

    241127-ye7y4stman

  • MD5

    f9b7d4639b59abb30e0f3489e8d27906

  • SHA1

    15851f7e107976e9ad16d310e19446579b902188

  • SHA256

    c6d701287fa8b065989ef6f157b47249866d56ad857f296ccfa2c3745a3fe4a8

  • SHA512

    ce8d453d0a7680bf287b338e22be6e4d7641838a914fba9dde1a08ff165d3a2722cda3eb24016fbfc206319f07f99f91878490e065ab2ec5e562c65e64e56d87

  • SSDEEP

    98304:+/CdIM97uW4yje5CU6aim/q8HJSZywIcIu/uCcYZN9rBopDkg26i5EFlQMsPfr2r:u29qW4rN6aimywQywIjuoYZN9rBiDkgx

Malware Config

Extracted

Family

axbanker

C2

https://sheet-14c1d-default-rtdb.firebaseio.com

Targets

    • Target

      c6d701287fa8b065989ef6f157b47249866d56ad857f296ccfa2c3745a3fe4a8

    • Size

      5.4MB

    • MD5

      f9b7d4639b59abb30e0f3489e8d27906

    • SHA1

      15851f7e107976e9ad16d310e19446579b902188

    • SHA256

      c6d701287fa8b065989ef6f157b47249866d56ad857f296ccfa2c3745a3fe4a8

    • SHA512

      ce8d453d0a7680bf287b338e22be6e4d7641838a914fba9dde1a08ff165d3a2722cda3eb24016fbfc206319f07f99f91878490e065ab2ec5e562c65e64e56d87

    • SSDEEP

      98304:+/CdIM97uW4yje5CU6aim/q8HJSZywIcIu/uCcYZN9rBopDkg26i5EFlQMsPfr2r:u29qW4rN6aimywQywIjuoYZN9rBiDkgx

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries the mobile country code (MCC)

MITRE ATT&CK Mobile v15

Tasks