Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3d365a73eaa676b9ea64a5e3f2eb0130ab09ff35087f626f45ae8233aebf4c24

  • Size

    202KB

  • Sample

    250124-2kgkwstmbr

  • MD5

    f78e6aef4f74925687de393667395496

  • SHA1

    239f35629a9b9aba485516c5794c77cfdce91905

  • SHA256

    3d365a73eaa676b9ea64a5e3f2eb0130ab09ff35087f626f45ae8233aebf4c24

  • SHA512

    dfc0c60915ab685cd29fecfadd6144dd8dfb7ce859d264245ea5f6738c885e79bc3d2f74e90dac2541c3332a878530eca0474a8291181c9fa93e3ba89118aa14

  • SSDEEP

    3072:KYKsu1WnjLYkFCLtMINbdsMa1AEPM6Us5vd+3XvhNA1xpCBongHx2M/SC7ZKPx:ndu1ICLtMSC12OdK/kppngRiC7ZKJ

Malware Config

Extracted

Family

trickbot

Version

100010

Botnet

mon36

C2

5.34.180.180:443

64.74.160.228:443

198.46.198.116:443

5.34.180.185:443

107.152.46.188:443

195.123.241.214:443

23.254.224.2:443

107.172.188.113:443

200.52.147.93:443

185.198.59.45:443

45.14.226.101:443

185.82.126.38:443

85.204.116.139:443

45.155.173.248:443

103.91.244.50:443

45.230.244.20:443

45.226.124.226:443

187.84.95.6:443

186.250.157.116:443

186.137.85.76:443

Attributes
  • autorun
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target

      3d365a73eaa676b9ea64a5e3f2eb0130ab09ff35087f626f45ae8233aebf4c24

    • Size

      202KB

    • MD5

      f78e6aef4f74925687de393667395496

    • SHA1

      239f35629a9b9aba485516c5794c77cfdce91905

    • SHA256

      3d365a73eaa676b9ea64a5e3f2eb0130ab09ff35087f626f45ae8233aebf4c24

    • SHA512

      dfc0c60915ab685cd29fecfadd6144dd8dfb7ce859d264245ea5f6738c885e79bc3d2f74e90dac2541c3332a878530eca0474a8291181c9fa93e3ba89118aa14

    • SSDEEP

      3072:KYKsu1WnjLYkFCLtMINbdsMa1AEPM6Us5vd+3XvhNA1xpCBongHx2M/SC7ZKPx:ndu1ICLtMSC12OdK/kppngRiC7ZKJ

MITRE ATT&CK Enterprise v15

Tasks