Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

07/01/2025, 17:56

250107-wh19matmcm 1

07/01/2025, 15:17

250107-sn7rtawpdt 10

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    07/01/2025, 15:17

General

  • Target

    DarkKore-0.3.5-1.19.4.jar

  • Size

    698KB

  • MD5

    c218f4858e4f2a42d595c744c8e92127

  • SHA1

    dac64cfeeacbfc85ed75f9300b56e6f62b563db4

  • SHA256

    f1488d8b97d30fc8fbfa1b2e6718f3ffe80b48231e3cf1fd59f589c801874937

  • SHA512

    d5e6e3a3c6d59a37311bc11fe95e08e5e399dce6c756a78df857898a9f1dad85404a8ae30892786c507ebd8a4779f3889e263362eebd4b18adc90c7797083a07

  • SSDEEP

    12288:tsAJ1NKNaiYtgUjngvaFgvKNwUuAtd8hbvdKnSX3jgBv66FzWoep:tsAJs8X7FgqoAtdOx7T466Yoep

Score
10/10

Malware Config

Signatures

  • Detects RedTiger Stealer 7 IoCs
  • Redtiger family

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\DarkKore-0.3.5-1.19.4.jar
    1⤵
      PID:2432

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2432-2-0x00000000025E0000-0x0000000002850000-memory.dmp

      Filesize

      2.4MB

    • memory/2432-10-0x0000000000450000-0x0000000000451000-memory.dmp

      Filesize

      4KB

    • memory/2432-11-0x00000000025E0000-0x0000000002850000-memory.dmp

      Filesize

      2.4MB