Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f3795384c7620193ee7b3fb71ba91ccba94c4b4c4d01530577f705df7e7f60dd.exe

  • Size

    303KB

  • Sample

    250324-d7kdasv1ax

  • MD5

    e02387da889815329b76650141579a95

  • SHA1

    93bb424c70dc741bb6b248d2b9035eeb26b5fb13

  • SHA256

    f3795384c7620193ee7b3fb71ba91ccba94c4b4c4d01530577f705df7e7f60dd

  • SHA512

    2715436700ca0fd185f69f90fecd6b5b8b3e2386260f9533fb70b280433dd7f6b97c6089361fe6e8ce733a8b4b90610266cac06952fa6a29074cdf72fedbd458

  • SSDEEP

    6144:yv1T6MDdbICydeBxbf0G3aLpbwsCwvmA1D0h8Jl:yvD10G3alstW1DFJl

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/1349107907471609938/ryDHij2m7lX3y2BsfcEqrdcyg5cAB6Mox5Qpkc5glH5mS5EMBSpcCYjIgriqI1v4xyfz

Targets

    • Target

      f3795384c7620193ee7b3fb71ba91ccba94c4b4c4d01530577f705df7e7f60dd.exe

    • Size

      303KB

    • MD5

      e02387da889815329b76650141579a95

    • SHA1

      93bb424c70dc741bb6b248d2b9035eeb26b5fb13

    • SHA256

      f3795384c7620193ee7b3fb71ba91ccba94c4b4c4d01530577f705df7e7f60dd

    • SHA512

      2715436700ca0fd185f69f90fecd6b5b8b3e2386260f9533fb70b280433dd7f6b97c6089361fe6e8ce733a8b4b90610266cac06952fa6a29074cdf72fedbd458

    • SSDEEP

      6144:yv1T6MDdbICydeBxbf0G3aLpbwsCwvmA1D0h8Jl:yvD10G3alstW1DFJl

    • 44Caliber

      An open source infostealer written in C#.

    • 44Caliber family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks