Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2025-03-19_f144e88bfaeef972077f19f24ec9526a_luca-stealer
-
Size
6.6MB
-
Sample
250319-s7rvpsskw4
-
MD5
f144e88bfaeef972077f19f24ec9526a
-
SHA1
b39969f6a783aa958bb97130a65b2a601b7c7efb
-
SHA256
fbc0fa87a71c0ab9e7715e011ba971af8544e44c278b7b78098aacd7ef60e993
-
SHA512
a3a07b42ee6747c134e9837939f8336077ac4720392bb8a57d3ea80fbd30ead736cdf993ea075a4c5569aa9d4a97c93d9cf2917f8be70127faeaa25d97de60b3
-
SSDEEP
196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz3:kfauN/HYOSIT/EVF9b
Malware Config
Targets
-
-
Target
2025-03-19_f144e88bfaeef972077f19f24ec9526a_luca-stealer
-
Size
6.6MB
-
MD5
f144e88bfaeef972077f19f24ec9526a
-
SHA1
b39969f6a783aa958bb97130a65b2a601b7c7efb
-
SHA256
fbc0fa87a71c0ab9e7715e011ba971af8544e44c278b7b78098aacd7ef60e993
-
SHA512
a3a07b42ee6747c134e9837939f8336077ac4720392bb8a57d3ea80fbd30ead736cdf993ea075a4c5569aa9d4a97c93d9cf2917f8be70127faeaa25d97de60b3
-
SSDEEP
196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz3:kfauN/HYOSIT/EVF9b
Score10/10-
Beapy
Beapy is a python worm with crypto mining capabilities.
-
Beapy family
-
Mimikatz
mimikatz is an open source tool to dump credentials on Windows.
-
Mimikatz family
-
Contacts a large (7695) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
mimikatz is an open source tool to dump credentials on Windows
-
Loads dropped DLL
-