Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2374d6239fcf64fcd5198a591bebe61855b4168a869bc1c9f66960d203e605f2.exe

  • Size

    89KB

  • Sample

    250113-vg12sssjhr

  • MD5

    189bdf4e72bc45dd1880e183dcf89bdb

  • SHA1

    72ab456ac41ad9a84369c7cbcbac4e4e339f0400

  • SHA256

    2374d6239fcf64fcd5198a591bebe61855b4168a869bc1c9f66960d203e605f2

  • SHA512

    0bacd4a63a0f82a8cdf1897e22674a41e60c54c604aec7d6249754fee50eb74c2501a98a8f386e3be8c6a2404030e568cc3984102e2dffa94a31099e92adbb6b

  • SSDEEP

    1536:J1+mFM2HXKZgixhIksu+XM5/HtAQ9Jox7q:D+4MJIkLZJNAQ9Jo9q

Malware Config

Targets

    • Target

      2374d6239fcf64fcd5198a591bebe61855b4168a869bc1c9f66960d203e605f2.exe

    • Size

      89KB

    • MD5

      189bdf4e72bc45dd1880e183dcf89bdb

    • SHA1

      72ab456ac41ad9a84369c7cbcbac4e4e339f0400

    • SHA256

      2374d6239fcf64fcd5198a591bebe61855b4168a869bc1c9f66960d203e605f2

    • SHA512

      0bacd4a63a0f82a8cdf1897e22674a41e60c54c604aec7d6249754fee50eb74c2501a98a8f386e3be8c6a2404030e568cc3984102e2dffa94a31099e92adbb6b

    • SSDEEP

      1536:J1+mFM2HXKZgixhIksu+XM5/HtAQ9Jox7q:D+4MJIkLZJNAQ9Jo9q

    • Tinba / TinyBanker

      Banking trojan which uses packet sniffing to steal data.

    • Tinba family

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks