Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5e8e0fa80a6ab936f94a262517ccc34ffcd7549edf50889db99b020de0e75433

  • Size

    7.0MB

  • Sample

    250227-h9ecaa1n12

  • MD5

    fe29a51a1654294ab29c17997136d769

  • SHA1

    97d26a72778d21f1276475d31689c8de9667633e

  • SHA256

    5e8e0fa80a6ab936f94a262517ccc34ffcd7549edf50889db99b020de0e75433

  • SHA512

    d9ffa634225f71dfdb3255342b44db4f76b1c420dfa1b1472b3e4e01540fc6d2c81d55cf5765f25243743b6336fc0d5627ffac02ff78456efb5a98dfc9a29072

  • SSDEEP

    98304:94pAEu/JCq0uT6NXOvyGzQg6x0l3XaGgcVGHkQQClgtiQ5wUBoQ4/5i:9f0Ge8Qx0l8cwrzQ5wUBJB

Malware Config

Extracted

Family

metastealer

C2

kiyaqoimsiieeyqa.xyz

ssqsmisuowqcwsqo.xyz

ykqmwgsuummieaug.xyz

ewukeskgqswqesiw.xyz

cscqcsgewmwwaaui.xyz

cyoksykiamiscyia.xyz

okgomokemoucqeso.xyz

ikwacuakiqeimwua.xyz

aawcsqqaywckiwmi.xyz

aiqasksgmyeqocei.xyz

qgumcuisgaeyuqqe.xyz

eiesoycamyqqgcea.xyz

ywceswakicsqomqw.xyz

auaieuewouawygku.xyz

cmiascusccywowcs.xyz

uiqkkomkaceqacec.xyz

quqeciymqmkqccqw.xyz

ssqsauuuyyigouou.xyz

aogaakukuugqswcy.xyz

ucgwcwsuqsuwewgc.xyz

Attributes
  • dga_seed

    21845

  • domain_length

    16

  • num_dga_domains

    10000

  • port

    443

Targets

    • Target

      5e8e0fa80a6ab936f94a262517ccc34ffcd7549edf50889db99b020de0e75433

    • Size

      7.0MB

    • MD5

      fe29a51a1654294ab29c17997136d769

    • SHA1

      97d26a72778d21f1276475d31689c8de9667633e

    • SHA256

      5e8e0fa80a6ab936f94a262517ccc34ffcd7549edf50889db99b020de0e75433

    • SHA512

      d9ffa634225f71dfdb3255342b44db4f76b1c420dfa1b1472b3e4e01540fc6d2c81d55cf5765f25243743b6336fc0d5627ffac02ff78456efb5a98dfc9a29072

    • SSDEEP

      98304:94pAEu/JCq0uT6NXOvyGzQg6x0l3XaGgcVGHkQQClgtiQ5wUBoQ4/5i:9f0Ge8Qx0l8cwrzQ5wUBJB

    Score
    8/10
    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

MITRE ATT&CK Enterprise v15

Tasks