Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    de739e39b443896784ac47a54e6ff177aa1a0276972f8fcefefd89096feb324d

  • Size

    274KB

  • Sample

    250313-h77k2syzey

  • MD5

    212e21699f779492a3d7258caae09adb

  • SHA1

    1a0ce654cfa010cc8fa134a7b51fa9cfe1a81f37

  • SHA256

    de739e39b443896784ac47a54e6ff177aa1a0276972f8fcefefd89096feb324d

  • SHA512

    53458096654ec266d5ca03d960d1a9178ea136d33db5d11fcd45aeafacd8613cc71214784a3c5a3fc064c2e6c521f5d0f5e570b5fc4fd94a3613cf33facb14fb

  • SSDEEP

    3072:pT59B82ObyQfpUdzd0v4HCmE2uiUSHSzNyS46sNDQgD3h6cAufDlCx8ieI/KQ73o:t5962fQebXCFD43WGRQkD05xq

Malware Config

Targets

    • Target

      de739e39b443896784ac47a54e6ff177aa1a0276972f8fcefefd89096feb324d

    • Size

      274KB

    • MD5

      212e21699f779492a3d7258caae09adb

    • SHA1

      1a0ce654cfa010cc8fa134a7b51fa9cfe1a81f37

    • SHA256

      de739e39b443896784ac47a54e6ff177aa1a0276972f8fcefefd89096feb324d

    • SHA512

      53458096654ec266d5ca03d960d1a9178ea136d33db5d11fcd45aeafacd8613cc71214784a3c5a3fc064c2e6c521f5d0f5e570b5fc4fd94a3613cf33facb14fb

    • SSDEEP

      3072:pT59B82ObyQfpUdzd0v4HCmE2uiUSHSzNyS46sNDQgD3h6cAufDlCx8ieI/KQ73o:t5962fQebXCFD43WGRQkD05xq

    • 44Caliber

      An open source infostealer written in C#.

    • 44Caliber family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks