Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ec0d356acab765845f3a575925bcf37bb123d9e31a7d715a40ab9a45c8ab9747.zip

  • Size

    2.8MB

  • MD5

    d76d018baef0f25791688e77dd03af9c

  • SHA1

    7e5fa4817f638a3eefc8c6f61a76c06fe8d65e12

  • SHA256

    ac9b2892adb15e36b51d8e8e4715f55cdaace5c55bf156c0b47cf3cd36e2e64b

  • SHA512

    7136cc2e48c29481ad933a4946bab8c0dc04f146ba1c9ef8806737429f577139244d024085ad73f703d765696faee071c9156e5d4814780c22e728804764e6f1

  • SSDEEP

    49152:N4Rp+AM5hkjtAgdcMGZDe7okgdUKvfgD1JhvrGpxTkGjv1fweb4+xHSngIGgU3VF:eRpA5hsAvDxkuHgJPvraRYeb4oCug0ww

Malware Config

Extracted

Family

cryptbot

C2

http://home.thrtpp13sb.top/raOzktqqsOFBfTfWPzPd11

Signatures

  • Cryptbot family
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

Files

  • ec0d356acab765845f3a575925bcf37bb123d9e31a7d715a40ab9a45c8ab9747.zip
    .zip

    Password: infected

  • ec0d356acab765845f3a575925bcf37bb123d9e31a7d715a40ab9a45c8ab9747.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    51b39aff649af7abc30a06f2362db069


    Code Sign

    Headers

    Imports

    Sections