Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
45.139.105.159_-_files_-_dVVORMr.exe___b5c6bf928455a865d23284c92ee0d6f9.dat
-
Size
931KB
-
Sample
221019-mv1desfhaq
-
MD5
b5c6bf928455a865d23284c92ee0d6f9
-
SHA1
d1dd08dda99dd92c3ac3233d86e6ee35413c8e2b
-
SHA256
80067654edee465f36b83d436bcfe0002d4da5b57a16df9545afed6912e379a6
-
SHA512
86f7ee60f7bde54cc0d2a3c2686e125e6728e3cdb675349290a2c63c366d83c35e916111e449904d88146da70e41e4eb4acd41642f7d55656b8984158a8c99cc
-
SSDEEP
24576:jyJE/eo0zlvyn9DiwzjNVVreEqrA6eyz+1ro:2rSD5zjDV36nq0
Static task
static1
Behavioral task
behavioral1
Sample
45.139.105.159_-_files_-_dVVORMr.exe___b5c6bf928455a865d23284c92ee0d6f9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
45.139.105.159_-_files_-_dVVORMr.exe___b5c6bf928455a865d23284c92ee0d6f9.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
45.139.105.159_-_files_-_dVVORMr.exe___b5c6bf928455a865d23284c92ee0d6f9.dat
-
Size
931KB
-
MD5
b5c6bf928455a865d23284c92ee0d6f9
-
SHA1
d1dd08dda99dd92c3ac3233d86e6ee35413c8e2b
-
SHA256
80067654edee465f36b83d436bcfe0002d4da5b57a16df9545afed6912e379a6
-
SHA512
86f7ee60f7bde54cc0d2a3c2686e125e6728e3cdb675349290a2c63c366d83c35e916111e449904d88146da70e41e4eb4acd41642f7d55656b8984158a8c99cc
-
SSDEEP
24576:jyJE/eo0zlvyn9DiwzjNVVreEqrA6eyz+1ro:2rSD5zjDV36nq0
Score10/10-
Detects LgoogLoader payload
-
LgoogLoader
A downloader capable of dropping and executing other malware families.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-