Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2025-01-31_816212eb0b794c181976b9f7390a9c4f_mafia
-
Size
1.1MB
-
Sample
250131-s6ylvszlft
-
MD5
816212eb0b794c181976b9f7390a9c4f
-
SHA1
a4bdc434601084b6cb7450e9a0f5138ba2e4a815
-
SHA256
4b5d2f4d6d2ce056f1d048ef939bc2b31aa18953735b4d2cee6a0b08bcbd38f7
-
SHA512
af9775dd151a5f74629ef8a8bba28e05781f5f21cb91027714dec136c690f58f05dd3574fe34b5e59c3af78167a31eb1177c8fd416dce74b293216412d40377d
-
SSDEEP
24576:U8c4u1W6uhk+h5P7d3BFMukWMG+gcXh6dvrBV1gerPxHxmbuio8Tk3Qy0HyNtK3p:rZug6uq+hMTG+g+h6dvrBV1gerPxHxmf
Malware Config
Extracted
trickbot
100018
rob110
38.110.103.124:443
185.56.76.28:443
204.138.26.60:443
60.51.47.65:443
74.85.157.139:443
68.69.26.182:443
38.110.103.136:443
38.110.103.18:443
138.34.28.219:443
185.56.76.94:443
217.115.240.248:443
24.162.214.166:443
80.15.2.105:443
154.58.23.192:443
38.110.100.104:443
45.36.99.184:443
185.56.76.108:443
185.56.76.72:443
138.34.28.35:443
97.83.40.67:443
-
autorunName:pwgrabbName:pwgrabc
Targets
-
-
Target
2025-01-31_816212eb0b794c181976b9f7390a9c4f_mafia
-
Size
1.1MB
-
MD5
816212eb0b794c181976b9f7390a9c4f
-
SHA1
a4bdc434601084b6cb7450e9a0f5138ba2e4a815
-
SHA256
4b5d2f4d6d2ce056f1d048ef939bc2b31aa18953735b4d2cee6a0b08bcbd38f7
-
SHA512
af9775dd151a5f74629ef8a8bba28e05781f5f21cb91027714dec136c690f58f05dd3574fe34b5e59c3af78167a31eb1177c8fd416dce74b293216412d40377d
-
SSDEEP
24576:U8c4u1W6uhk+h5P7d3BFMukWMG+gcXh6dvrBV1gerPxHxmbuio8Tk3Qy0HyNtK3p:rZug6uq+hMTG+g+h6dvrBV1gerPxHxmf
Score10/10-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-
Trickbot family
-