Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Insidious.exe
-
Size
303KB
-
Sample
250304-r4ewastls4
-
MD5
7c71b3abefc0cd9e6852c577e466d905
-
SHA1
1e2777765eb8340b0f9eefaa36b213634806d20c
-
SHA256
686ef70e6f83b17792aac10f5853cd728d1647be6c57cfae1331602df69b211f
-
SHA512
8f3a8f7142a73aacca46b930cf11b21efa0f8433480cb3e95d560a1a96f958413f00a2e8b05d7749656e50c6aa31e6da815434b0f703541821f42529b9a41114
-
SSDEEP
6144:0b4T6MDdbICydeBrdcQG3yf51+/wjmA1D0113:0bGhcQG3yB1aK1DY3
Malware Config
Extracted
44caliber
https://discord.com/api/webhooks/1346493084548075560/YEckkrmFm7scerU_vEBzkRjSlTmaNinaKTCIOFAolLHyb8EgBC4MRQBOOkH10nX3NlHv
Targets
-
-
Target
Insidious.exe
-
Size
303KB
-
MD5
7c71b3abefc0cd9e6852c577e466d905
-
SHA1
1e2777765eb8340b0f9eefaa36b213634806d20c
-
SHA256
686ef70e6f83b17792aac10f5853cd728d1647be6c57cfae1331602df69b211f
-
SHA512
8f3a8f7142a73aacca46b930cf11b21efa0f8433480cb3e95d560a1a96f958413f00a2e8b05d7749656e50c6aa31e6da815434b0f703541821f42529b9a41114
-
SSDEEP
6144:0b4T6MDdbICydeBrdcQG3yf51+/wjmA1D0113:0bGhcQG3yB1aK1DY3
-
44Caliber family
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-