Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
cdbf4a76ee56b8f26b29fccc6fb83c672ac897795554c660bb8bbd05acd22131
-
Size
3.1MB
-
Sample
220524-2k27laedcp
-
MD5
143d0f36308fd6d510f611f37b9f0cb8
-
SHA1
0ef800088a40ccea4126512037e7326594bbabb4
-
SHA256
cdbf4a76ee56b8f26b29fccc6fb83c672ac897795554c660bb8bbd05acd22131
-
SHA512
9c628fd049dcd8e88b7433b16f2b59cf251ea1e384878aba2196ff0c97474bcfc03ab4f56cdccb11b141ede4950d3a40c4b5f945c3d1927ce7941d5277a2f9b9
Static task
static1
Behavioral task
behavioral1
Sample
cdbf4a76ee56b8f26b29fccc6fb83c672ac897795554c660bb8bbd05acd22131.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
cdbf4a76ee56b8f26b29fccc6fb83c672ac897795554c660bb8bbd05acd22131.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
azorult
http://195.245.112.115/index.php
Extracted
oski
levitt.ug
Extracted
raccoon
180d3985eb74eacf2de83c771fbf30a60f670ec0
-
url4cnc
https://telete.in/jrikitiki
Targets
-
-
Target
cdbf4a76ee56b8f26b29fccc6fb83c672ac897795554c660bb8bbd05acd22131
-
Size
3.1MB
-
MD5
143d0f36308fd6d510f611f37b9f0cb8
-
SHA1
0ef800088a40ccea4126512037e7326594bbabb4
-
SHA256
cdbf4a76ee56b8f26b29fccc6fb83c672ac897795554c660bb8bbd05acd22131
-
SHA512
9c628fd049dcd8e88b7433b16f2b59cf251ea1e384878aba2196ff0c97474bcfc03ab4f56cdccb11b141ede4950d3a40c4b5f945c3d1927ce7941d5277a2f9b9
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Raccoon Stealer Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-