Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3032-0-0x0000000180000000-0x0000000181CB2000-memory.dmp

  • Size

    28.7MB

  • Sample

    250209-n91s6szqf1

  • MD5

    a87c3a99063de281e6331aabad3fe766

  • SHA1

    2cd490d0c807b7b609701592ae5e6abe473d352c

  • SHA256

    aaa239d4c447d846531c86ea0087d1412907a3a7681f3b8072579a5693fa2372

  • SHA512

    c5deea10310597215a9652249b324bab8bf48fb8abd5f3413cead4371ede394a38e9797bce95957da8007f57c8189d04f86c8e188f97e7dcd2ab6703fe7b9b8d

  • SSDEEP

    768:4z7vRTYS4Oi5ONdWJ7HRCRuVnxsaQu7SDqRefml4I4QDqauXj57CHf8Id+tY5h82:4zh7eO6hHRCSsBfml4I6z5If8IYoVTt

Score
10/10

Malware Config

Extracted

Family

latrodectus

Version

1.4

C2

https://apworsindos.com/test/

https://reminasolirol.com/test/

Attributes
  • group

    Mimikast

  • user_agent

    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

aes.hex

Targets

    • Target

      3032-0-0x0000000180000000-0x0000000181CB2000-memory.dmp

    • Size

      28.7MB

    • MD5

      a87c3a99063de281e6331aabad3fe766

    • SHA1

      2cd490d0c807b7b609701592ae5e6abe473d352c

    • SHA256

      aaa239d4c447d846531c86ea0087d1412907a3a7681f3b8072579a5693fa2372

    • SHA512

      c5deea10310597215a9652249b324bab8bf48fb8abd5f3413cead4371ede394a38e9797bce95957da8007f57c8189d04f86c8e188f97e7dcd2ab6703fe7b9b8d

    • SSDEEP

      768:4z7vRTYS4Oi5ONdWJ7HRCRuVnxsaQu7SDqRefml4I4QDqauXj57CHf8Id+tY5h82:4zh7eO6hHRCSsBfml4I6z5If8IYoVTt

    Score
    8/10
    • Downloads MZ/PE file

MITRE ATT&CK Enterprise v15

Tasks