Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f8f537927599dfb23d134256041c23260267468cb0443f880914f6efe285636eN.exe

  • Size

    303KB

  • Sample

    250323-ywrcpaxny4

  • MD5

    e6d4263c0072f91e030d9f3e456f76a0

  • SHA1

    83af72a1204dd56bfe0dd8e87384c36724d0d198

  • SHA256

    f8f537927599dfb23d134256041c23260267468cb0443f880914f6efe285636e

  • SHA512

    6dea33c5261deb852e47875fd3fd5fb4447d60e7a964c26433485f18117ce76417e17e764fa898f519c85fb133d0863bb0760a79c4be61dd98a8d96a2a44447e

  • SSDEEP

    6144:yv1T6MDdbICydeBxbf0G3aLpbwsCwvmA1D0h8J:yvD10G3alstW1DFJ

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/1349107907471609938/ryDHij2m7lX3y2BsfcEqrdcyg5cAB6Mox5Qpkc5glH5mS5EMBSpcCYjIgriqI1v4xyfz

Targets

    • Target

      f8f537927599dfb23d134256041c23260267468cb0443f880914f6efe285636eN.exe

    • Size

      303KB

    • MD5

      e6d4263c0072f91e030d9f3e456f76a0

    • SHA1

      83af72a1204dd56bfe0dd8e87384c36724d0d198

    • SHA256

      f8f537927599dfb23d134256041c23260267468cb0443f880914f6efe285636e

    • SHA512

      6dea33c5261deb852e47875fd3fd5fb4447d60e7a964c26433485f18117ce76417e17e764fa898f519c85fb133d0863bb0760a79c4be61dd98a8d96a2a44447e

    • SSDEEP

      6144:yv1T6MDdbICydeBxbf0G3aLpbwsCwvmA1D0h8J:yvD10G3alstW1DFJ

    • 44Caliber

      An open source infostealer written in C#.

    • 44Caliber family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks