Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2025-03-24_d3ad939bcb206e44733405a5408e0485_amadey_artra-downloader_mafia_rhadamanthys

  • Size

    70KB

  • Sample

    250324-1mhejawxht

  • MD5

    d3ad939bcb206e44733405a5408e0485

  • SHA1

    3dc96c4b836f6c735d77428b47ed36bc26eeb24d

  • SHA256

    f2c5ec57eee4aeeb2330cd34fbefc223b69be7853bb5c2993ecfb7c56c81cc44

  • SHA512

    5c733d51854843ddeea5f15e186d62c4f048a6c474ae77618f6829ee3cb02f494aac19852b1108611bc6a94bb110ea7b8991751374ccb58702e202568df57904

  • SSDEEP

    1536:g0uNcRgSYlBMI0hkCI1teqpXmIklpwL3nYccW:g0uNGgSYlBMzkCIu5GYcc

Malware Config

Targets

    • Target

      2025-03-24_d3ad939bcb206e44733405a5408e0485_amadey_artra-downloader_mafia_rhadamanthys

    • Size

      70KB

    • MD5

      d3ad939bcb206e44733405a5408e0485

    • SHA1

      3dc96c4b836f6c735d77428b47ed36bc26eeb24d

    • SHA256

      f2c5ec57eee4aeeb2330cd34fbefc223b69be7853bb5c2993ecfb7c56c81cc44

    • SHA512

      5c733d51854843ddeea5f15e186d62c4f048a6c474ae77618f6829ee3cb02f494aac19852b1108611bc6a94bb110ea7b8991751374ccb58702e202568df57904

    • SSDEEP

      1536:g0uNcRgSYlBMI0hkCI1teqpXmIklpwL3nYccW:g0uNGgSYlBMzkCIu5GYcc

    • FlawedAmmyy RAT

      Remote-access trojan based on leaked code for the Ammyy remote admin software.

    • Flawedammyy family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks