Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2025-01-19...ia.exe

windows7-x64

10

2025-01-19...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-19_70c7e104869e9a0effe28d01ed53b9b7_karagany_mafia

  • Size

    1.6MB

  • Sample

    250119-3fnn3s1lcl

  • MD5

    70c7e104869e9a0effe28d01ed53b9b7

  • SHA1

    e058cc01a41abc8b4a82f5d2ed2925477ab5dc03

  • SHA256

    accd4d1500b90bf5f771d7843461d766dabf4b06a1591b041b00aa397e36b947

  • SHA512

    7fdfc12a96b1091eff1d37985c181977840490b91b37bec3a716dd8584000f983836ffbf59ff6435e4581d0464408a5650493fef7d8241ab35cce1b50656f252

  • SSDEEP

    24576:8CuGlQxDni9rVOsqjnhMgeiCl7G0nehbGZpbD:wGlQx7ilYDmg27RnWGj

Score
10/10
trickbotbankerdiscoveryspywarestealertrojan

Malware Config

Targets

    • Target

      2025-01-19_70c7e104869e9a0effe28d01ed53b9b7_karagany_mafia

    • Size

      1.6MB

    • MD5

      70c7e104869e9a0effe28d01ed53b9b7

    • SHA1

      e058cc01a41abc8b4a82f5d2ed2925477ab5dc03

    • SHA256

      accd4d1500b90bf5f771d7843461d766dabf4b06a1591b041b00aa397e36b947

    • SHA512

      7fdfc12a96b1091eff1d37985c181977840490b91b37bec3a716dd8584000f983836ffbf59ff6435e4581d0464408a5650493fef7d8241ab35cce1b50656f252

    • SSDEEP

      24576:8CuGlQxDni9rVOsqjnhMgeiCl7G0nehbGZpbD:wGlQx7ilYDmg27RnWGj

    Score
    10/10
    trickbotbankerdiscoveryspywarestealertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot family

      trickbot

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks