Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ab8a843f20bcb1f3396ad5ada9e7219a41ee0096283cb8230dfb57e3196ca3b4N.exe
-
Size
303KB
-
Sample
250225-dnqqzazps6
-
MD5
148c735a6d5ed9319b5589f6f3da4370
-
SHA1
af665c2e1e8c6182c96a591cdb2fec6ba22e2b7b
-
SHA256
ab8a843f20bcb1f3396ad5ada9e7219a41ee0096283cb8230dfb57e3196ca3b4
-
SHA512
71771ba4c2c884ad0a33ea0cb7b9740cac4a958dd696a9a4ae965fb705307494a55678122c5d0796b01053baa636ca6e4e0e4a9f84c45e8aaba103bf6087e436
-
SSDEEP
6144:jT8T6MDdbICydeBbUoGYyo51ZfpvwrmA1D0oy9:jTq4oGYys1ZxvK1Du9
Behavioral task
behavioral1
Sample
ab8a843f20bcb1f3396ad5ada9e7219a41ee0096283cb8230dfb57e3196ca3b4N.exe
Resource
win7-20240903-en
Malware Config
Extracted
44caliber
https://discord.com/api/webhooks/1339959928726749206/zR7gpRGAWJs7CmuNiEfi7k7GbCXcAzsDQ-VSd5Os1J81s8ySI7nGZ3Oh8tUO-0iIcgIC
Targets
-
-
Target
ab8a843f20bcb1f3396ad5ada9e7219a41ee0096283cb8230dfb57e3196ca3b4N.exe
-
Size
303KB
-
MD5
148c735a6d5ed9319b5589f6f3da4370
-
SHA1
af665c2e1e8c6182c96a591cdb2fec6ba22e2b7b
-
SHA256
ab8a843f20bcb1f3396ad5ada9e7219a41ee0096283cb8230dfb57e3196ca3b4
-
SHA512
71771ba4c2c884ad0a33ea0cb7b9740cac4a958dd696a9a4ae965fb705307494a55678122c5d0796b01053baa636ca6e4e0e4a9f84c45e8aaba103bf6087e436
-
SSDEEP
6144:jT8T6MDdbICydeBbUoGYyo51ZfpvwrmA1D0oy9:jTq4oGYys1ZxvK1Du9
-
44Caliber family
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-