Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

Lancaster.zip

windows10-ltsc 2021-x64

10

Lancaster.zip

windows11-21h2-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Lancaster.zip

  • Size

    7.5MB

  • Sample

    250312-tr9w1sxk18

  • MD5

    aa29ff8dcbfb8156eba033e28f03a04f

  • SHA1

    1453014278c8891fce9685c0a6bd4d079a763c24

  • SHA256

    1a34c9b4500cf7859c36c102209902202fb7188aca1ba759f2d5018bf2655cc1

  • SHA512

    14a8efc38a3dd0215b5b9587c80740681e0464f075ee777389e9458411590cf3cdd3eb0a7ef328effea5ae0ddc6e6af20266ed88717743cd46b364e0736c3eef

  • SSDEEP

    196608:GHSvJ6cIKoyGu1Rox8S3E06jJ/lSeZ/zr1mzScXNwG6qyOmcwzr+o:GHSAzTZu1RoxhL6hhpzQS4Sbqxm1N

Score
10/10
sectopratcredential_accessdiscoveryratspywarestealertrojan

Malware Config

Targets

    • Target

      Lancaster.zip

    • Size

      7.5MB

    • MD5

      aa29ff8dcbfb8156eba033e28f03a04f

    • SHA1

      1453014278c8891fce9685c0a6bd4d079a763c24

    • SHA256

      1a34c9b4500cf7859c36c102209902202fb7188aca1ba759f2d5018bf2655cc1

    • SHA512

      14a8efc38a3dd0215b5b9587c80740681e0464f075ee777389e9458411590cf3cdd3eb0a7ef328effea5ae0ddc6e6af20266ed88717743cd46b364e0736c3eef

    • SSDEEP

      196608:GHSvJ6cIKoyGu1Rox8S3E06jJ/lSeZ/zr1mzScXNwG6qyOmcwzr+o:GHSAzTZu1RoxhL6hhpzQS4Sbqxm1N

    Score
    10/10
    sectopratcredential_accessdiscoveryratspywarestealertrojan

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    • Sectoprat family

      sectoprat

    • Uses browser remote debugging

      Can be used control the browser and steal sensitive information such as credentials and session cookies.

      credential_accessstealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks