Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
EXTRACTORZIP.exe
-
Size
52.1MB
-
Sample
250326-fbk13a1k15
-
MD5
41efdb5c1086678970b980742df7c96d
-
SHA1
d4f3d8646d80c6dd2031ebd1c35d28738ad531bb
-
SHA256
0514e1a3c9aaea98eda8e0aaa69a94a4c226a513400e4cf4648a16f1c542bb1e
-
SHA512
ac8201fc39ed0d91ac8f0be73a082b65011e3d099b5fc0c6d7a375b8299f069ae55ad8f9bf3fe99ea7667f7e49c07efbdb008c60b7e35580e058d8bcfb44bb02
-
SSDEEP
1572864:HAtIupuelynyAJDoZUlmPcnfJhETjWYlUOELhIODQMkm:vYDwnyAhiUUcnRheWlLLDV
Behavioral task
behavioral1
Sample
EXTRACTORZIP.exe
Resource
win11-20250313-en
Behavioral task
behavioral2
Sample
discord_token_grabber.pyc
Resource
win11-20250313-en
Behavioral task
behavioral3
Sample
get_cookies.pyc
Resource
win11-20250313-en
Behavioral task
behavioral4
Sample
misc.pyc
Resource
win11-20250313-en
Behavioral task
behavioral5
Sample
passwords_grabber.pyc
Resource
win11-20250314-en
Behavioral task
behavioral6
Sample
source_prepared.pyc
Resource
win11-20250313-en
Malware Config
Targets
-
-
Target
EXTRACTORZIP.exe
-
Size
52.1MB
-
MD5
41efdb5c1086678970b980742df7c96d
-
SHA1
d4f3d8646d80c6dd2031ebd1c35d28738ad531bb
-
SHA256
0514e1a3c9aaea98eda8e0aaa69a94a4c226a513400e4cf4648a16f1c542bb1e
-
SHA512
ac8201fc39ed0d91ac8f0be73a082b65011e3d099b5fc0c6d7a375b8299f069ae55ad8f9bf3fe99ea7667f7e49c07efbdb008c60b7e35580e058d8bcfb44bb02
-
SSDEEP
1572864:HAtIupuelynyAJDoZUlmPcnfJhETjWYlUOELhIODQMkm:vYDwnyAhiUUcnRheWlLLDV
Score7/10-
Loads dropped DLL
-
-
-
Target
discord_token_grabber.pyc
-
Size
16KB
-
MD5
924ef065a5167d44170ac81a60cc6fbe
-
SHA1
ebfa171438758dd9810369d3077f618bfab5bc09
-
SHA256
78a36fae762432c89f4c0b185e5c227144817199dbde90d16749c6bfc0fb1dd1
-
SHA512
15a2144fe6e0e081856fd875bcbb239a83da115dce2cda1924f71cfc401f13f681d5047cb80b40cdcdcb617c12d9c12f7bfdc15d38177ace8685c59bb631afdc
-
SSDEEP
192:bIqqTmuEWauge+M6DA8AYv++JDcNQshU8En5W4NXOYd/G7XW:+9avP588A+DDWRm5FOUG7XW
Score3/10 -
-
-
Target
get_cookies.pyc
-
Size
9KB
-
MD5
c9a6c4ec57f83d1aa200fe076665c42c
-
SHA1
42bf07fb97a2ccd29a67067ae9ead40548e046b9
-
SHA256
ec0628cca3f23628d1ff24a88e8215238eee1601cfe9e49a4525fdca15034497
-
SHA512
ffe8ba3ff8edb65ff53b9006fa327991f9c272ace5f7cfb387080d8cd23f994842eee49246f1c32d41d6e081dff1a04f9c6b3e5d5e5e2f3cd96fead21fa09745
-
SSDEEP
192:srJe41QfUE0xZVbFAI6dokUpjYnuHN3gQ:iQBifedokqYnuHN3gQ
Score3/10 -
-
-
Target
misc.pyc
-
Size
4KB
-
MD5
36ed907d6c57862deacc25f4da2bde11
-
SHA1
0e21743b8eff2688e13055bfe26467cd3af43559
-
SHA256
8ebd34d6a4a41a2107ab7000da651fed3996ae0e13291fe6970971b5bc0e5087
-
SHA512
89dca2a052a77c829423d0cc1389e83b645ae97d063ccef2f47188c3b83dfeef6632d116cac714df01c908b148767d59e46006bded668f046fc78a564c52fdd4
-
SSDEEP
96:vDh/7Y8hYPUywfLDwfPsULKliOCpmrSTUpjdaJuo1kUZsX3g:vVR5ywfwXsULPJmDpjwN1kIo3g
Score3/10 -
-
-
Target
passwords_grabber.pyc
-
Size
7KB
-
MD5
cc180daa11732953527c69ac7bbea3b1
-
SHA1
24ea916374f1fe5981219c1c330ba8f851571e9e
-
SHA256
6a67c8b0591fef85f8436d152361796d4bf1fb3ddf46a5af873743cc16ece1fe
-
SHA512
5e4e259999b3155ca5d9f55de691ced7c918acdab8b7c3ef7bca69903d6057a6c102a997b4b2af4a655026b3dd3ea8aed855306633392ab6a9171e70a34dbfbb
-
SSDEEP
192:0tkwY6bLQ3hT8+NE102sGMleDkUhMbvEh:dwY6bLQ3RzHOMER
Score3/10 -
-
-
Target
source_prepared.pyc
-
Size
171KB
-
MD5
8e8ad2284e90bf2609644df341bcd44f
-
SHA1
60e69e33c98ed36d4dbf34eaef765d86b1c1cbcc
-
SHA256
38a9c85c0eaf9e299feba435f62dddcd9a2f7ce7cdc5cb8d07d113ff2770bb95
-
SHA512
6e92907d675885e1ddb85317d8286a0b193f8c1aa546826e3d3072282adafd3ed30c1ba3cc83796fa4d1b21456b70e4017181b7de1390278f0bb3bd958058e62
-
SSDEEP
3072:NTUawF05YGl3S2SVfUFoGoD7iD6GxrhQpvqda+oq5silDY:NS65hlrSNGo6r6Jqda+7sKY
Score3/10 -