Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

397015a142...93.exe

windows7-x64

10

397015a142...93.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    397015a1428f2ee24e69d670f97b98f744039041eaea4e9836a27b01ce96b793.exe

  • Size

    1.3MB

  • Sample

    250110-cqssnsylfv

  • MD5

    17374c7c08d5a0bc971e2988f2364c8c

  • SHA1

    dc9fd0ec4c80aadd53b77c3d920e0dc2c6b192ce

  • SHA256

    397015a1428f2ee24e69d670f97b98f744039041eaea4e9836a27b01ce96b793

  • SHA512

    54ffdd249cf89082816038e26cb2dce60397965a7e9ce4222488b93f3b1762d2aee9cfbf3b952aaaa5871ddf34ed4a2067b03d1a0e0fd966f2dd7f4a7318af00

  • SSDEEP

    24576:AqDEvCTbMWu7rQYlBQcBiT6rprG8adaxlGbI5d5tRp2FpiLYtul:ATvC/MTQYxsWR7adaXt2jwx

Score
10/10
formbooka02ddiscoveryratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

a02d

Decoy

coplus.market

oofing-jobs-74429.bond

healchemists.xyz

oofcarpenternearme-jp.xyz

enewebsolutions.online

harepoint.legal

88977.club

omptables.xyz

eat-pumps-31610.bond

endown.graphics

amsexgirls.website

ovevibes.xyz

u-thiensu.online

yblinds.xyz

rumpchiefofstaff.store

erzog.fun

rrm.lat

agiclime.pro

agaviet59.shop

lbdoanhnhan.net

Targets

    • Target

      397015a1428f2ee24e69d670f97b98f744039041eaea4e9836a27b01ce96b793.exe

    • Size

      1.3MB

    • MD5

      17374c7c08d5a0bc971e2988f2364c8c

    • SHA1

      dc9fd0ec4c80aadd53b77c3d920e0dc2c6b192ce

    • SHA256

      397015a1428f2ee24e69d670f97b98f744039041eaea4e9836a27b01ce96b793

    • SHA512

      54ffdd249cf89082816038e26cb2dce60397965a7e9ce4222488b93f3b1762d2aee9cfbf3b952aaaa5871ddf34ed4a2067b03d1a0e0fd966f2dd7f4a7318af00

    • SSDEEP

      24576:AqDEvCTbMWu7rQYlBQcBiT6rprG8adaxlGbI5d5tRp2FpiLYtul:ATvC/MTQYxsWR7adaXt2jwx

    Score
    10/10
    formbooka02ddiscoveryratspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks