Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9634912bdcd2ecfa47c0dc43aa42c53a97e18358c46b4f9cb4d2cd2cd188170b
-
Size
290KB
-
Sample
221028-1szwrsggh6
-
MD5
0ce0ade091b8719209cd4a975553f319
-
SHA1
752394083db982cbf0dda0bde6c12a6900c27e47
-
SHA256
9634912bdcd2ecfa47c0dc43aa42c53a97e18358c46b4f9cb4d2cd2cd188170b
-
SHA512
268ea3cfb629a6794412606db3a3a64eacf454f232d97748df0e516cbc3b553c9d2f8b82abaf6f996103f29e12ada8b05623e01e3758b6ce3478bbd7d181e9f2
-
SSDEEP
6144:QmcD66RRjf5JGmrpQsK3RD2u270jupCJsCxCH:ZcD663eZ2zkPaCxu
Behavioral task
behavioral1
Sample
9634912bdcd2ecfa47c0dc43aa42c53a97e18358c46b4f9cb4d2cd2cd188170b.exe
Resource
win7-20220901-en
Malware Config
Extracted
cybergate
2.6
gurban
elitcoderz.com:1700
localhost:1700
akgulko.zapto.org:85
***MUTEX***
-
enable_keylogger
true
-
enable_message_box
false
-
ftp_directory
./logs/
-
ftp_interval
30
-
injected_process
explorer.exe
-
install_dir
google
-
install_file
index.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
texto da mensagem
-
message_box_title
tÃtulo da mensagem
-
password
1111
-
regkey_hklm
google
Targets
-
-
Target
9634912bdcd2ecfa47c0dc43aa42c53a97e18358c46b4f9cb4d2cd2cd188170b
-
Size
290KB
-
MD5
0ce0ade091b8719209cd4a975553f319
-
SHA1
752394083db982cbf0dda0bde6c12a6900c27e47
-
SHA256
9634912bdcd2ecfa47c0dc43aa42c53a97e18358c46b4f9cb4d2cd2cd188170b
-
SHA512
268ea3cfb629a6794412606db3a3a64eacf454f232d97748df0e516cbc3b553c9d2f8b82abaf6f996103f29e12ada8b05623e01e3758b6ce3478bbd7d181e9f2
-
SSDEEP
6144:QmcD66RRjf5JGmrpQsK3RD2u270jupCJsCxCH:ZcD663eZ2zkPaCxu
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-