Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0069a24aff897f57fbc861fbcf5fca0fac7297da883ac169b09b1259d5ba2dbb.exe

  • Size

    368KB

  • Sample

    241226-dbs1kavqcp

  • MD5

    46b6312d182ac953c201c1b6bf1bacf6

  • SHA1

    6edcdb9d801e1ef4d6f096360f872d58b3bfb339

  • SHA256

    0069a24aff897f57fbc861fbcf5fca0fac7297da883ac169b09b1259d5ba2dbb

  • SHA512

    f6240ca84c7632f00ffbe4de08ece155d238f4a9ef7fa7cdec1699afba18fe937c756072504243bdd5a66450a2f789cbb2082d0cd6f461cf555fdae4a671aa3a

  • SSDEEP

    6144:eo5N5OazOZaTDWlVnrchrahdOxveC2wo80/agxb0zLz4qf:emSuOcHmnYhrDMTrban4qf

Malware Config

Targets

    • Target

      0069a24aff897f57fbc861fbcf5fca0fac7297da883ac169b09b1259d5ba2dbb.exe

    • Size

      368KB

    • MD5

      46b6312d182ac953c201c1b6bf1bacf6

    • SHA1

      6edcdb9d801e1ef4d6f096360f872d58b3bfb339

    • SHA256

      0069a24aff897f57fbc861fbcf5fca0fac7297da883ac169b09b1259d5ba2dbb

    • SHA512

      f6240ca84c7632f00ffbe4de08ece155d238f4a9ef7fa7cdec1699afba18fe937c756072504243bdd5a66450a2f789cbb2082d0cd6f461cf555fdae4a671aa3a

    • SSDEEP

      6144:eo5N5OazOZaTDWlVnrchrahdOxveC2wo80/agxb0zLz4qf:emSuOcHmnYhrDMTrban4qf

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

    • Trickbot family

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Stops running service(s)

    • Executes dropped EXE

    • Loads dropped DLL

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks