Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Proton.exe

windows7-x64

10

Proton.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Proton.exe

  • Size

    831KB

  • Sample

    250322-q9bv6axrx7

  • MD5

    34e8bec2eff81b0451a68e3fc7562fb8

  • SHA1

    91b8aa5907020bad02fcaed731f53e9e433e0f4d

  • SHA256

    dd31e310c502f14a8ca479ee8723dcb8ded8ce9caf6fbeaa435fc966bd1458a4

  • SHA512

    0a6d23997a9d29f40907097c28afa62162cc03369b8a8c4c84e124d131706a8dc19b62c0cc9efb2b6deccbcd72d4e034d9b893d538e5060d0cf7b43556bf4b05

  • SSDEEP

    24576:uZsS44StKHIPbcNK0KKfaOwI55l2SLaB4/:uZsSIKEgKKHwCBe

Score
10/10
quasaroffice04spywaretrojan

Malware Config

Extracted

Family

quasar

Version

1.5.0

Botnet

Office04

C2

fall-alberta.gl.at.ply.gg:48316

Mutex

f3374a4e-4175-4db9-a8d8-303de2184767

Attributes
  • encryption_key

    669A421372DEF816BCFAA19491270BD72DCE71F1

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Proton VPN

  • subdirectory

    SubDir

Targets

    • Target

      Proton.exe

    • Size

      831KB

    • MD5

      34e8bec2eff81b0451a68e3fc7562fb8

    • SHA1

      91b8aa5907020bad02fcaed731f53e9e433e0f4d

    • SHA256

      dd31e310c502f14a8ca479ee8723dcb8ded8ce9caf6fbeaa435fc966bd1458a4

    • SHA512

      0a6d23997a9d29f40907097c28afa62162cc03369b8a8c4c84e124d131706a8dc19b62c0cc9efb2b6deccbcd72d4e034d9b893d538e5060d0cf7b43556bf4b05

    • SSDEEP

      24576:uZsS44StKHIPbcNK0KKfaOwI55l2SLaB4/:uZsSIKEgKKHwCBe

    Score
    10/10
    quasaroffice04spywaretrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks