Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Setup.exe

  • Size

    303KB

  • Sample

    250316-r8kbkswrv3

  • MD5

    a7c46d89223aae0247743ad157d5bb99

  • SHA1

    30d8138399a6ab984f6587dc59a5a872c3028b98

  • SHA256

    226270f50c49bb830c26fea7aa4bdc98cc8543d5878227e0eaea717973bc0742

  • SHA512

    6a439332ba8add9fb64c14232010793dbca3455743f73755980549fbf45137d4082e4158db9813b3e9489e47f55353869f1e58f9d425181aa11121cab534b922

  • SSDEEP

    6144:tJFT6MDdbICydeB7jAm6XWjV/N5e6rmA1D0dQw:tJzXAm6XWh/CQ1Ddw

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/1248020250486902824/TkMj5f9npQC-r0dbczquh_D_SL4JTnEoHzVZ8lmRNJKNQq_i_S5ue4Gli64qNfMQUz7T

Targets

    • Target

      Setup.exe

    • Size

      303KB

    • MD5

      a7c46d89223aae0247743ad157d5bb99

    • SHA1

      30d8138399a6ab984f6587dc59a5a872c3028b98

    • SHA256

      226270f50c49bb830c26fea7aa4bdc98cc8543d5878227e0eaea717973bc0742

    • SHA512

      6a439332ba8add9fb64c14232010793dbca3455743f73755980549fbf45137d4082e4158db9813b3e9489e47f55353869f1e58f9d425181aa11121cab534b922

    • SSDEEP

      6144:tJFT6MDdbICydeB7jAm6XWjV/N5e6rmA1D0dQw:tJzXAm6XWh/CQ1Ddw

    • 44Caliber

      An open source infostealer written in C#.

    • 44Caliber family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks