Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    MDE_File_Sample_02cd76372db9a7b1a034d373eb5fa1bfcaf3ca54.zip

  • Size

    228KB

  • Sample

    250307-qj441s1nt6

  • MD5

    60b88475d47498ba9f234c0169b5bc4a

  • SHA1

    d7a584f53397bb2280a20f08cbc0b12481789733

  • SHA256

    3ff7002133b24cf5d0fc2ab6164bc3285e6aea09b35ab6a382af72d56abca6e0

  • SHA512

    5b3df27e79680d65893599a987dd01868d0d9e2c5da29aa94d3c7b79b623c7e82c5c12fee34a246c1ed65d46e12f2f86ade1cab64b51e585097c511efcb779b0

  • SSDEEP

    6144:CVgsMY9jmgkEVpM2UVHLp9uq9HgxWmgeNLV8e0TjsJS:9sjg2aLnuPImgyv8

Malware Config

Targets

    • Target

      guarantor for rental agreement ontario 63415.js

    • Size

      841KB

    • MD5

      3dd58dbf8ad6e951b32428ea6c392162

    • SHA1

      1b07118f9cbb86f42ea34020df4665d28683f934

    • SHA256

      07f4d8779c73139723c8880cbd966154bdba4d8b45bf00578778f7500fc37333

    • SHA512

      53ee7c2243aa09841371dd2c6d09ffd05e0567c44821008b389253b10cf1501622aab1b040f1bf39066d08b8597a12cc9430931dbdb7a88acfeebaf6c8618d02

    • SSDEEP

      24576:ovCgo+ogQc5WfNnZmD/nq79qiJle69PGwWpyQTa+FNE3NEr:ovCgo+ogQc5WfNnZmD/nc9qiaGWpyQT3

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Gootloader family

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks