Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c1d74ec41c57e24503bb5f05117a0215.exe
-
Size
873KB
-
Sample
221028-g3r45afahq
-
MD5
c1d74ec41c57e24503bb5f05117a0215
-
SHA1
47bd6a606edd6229962526f5488c5c8635acc50e
-
SHA256
ab380ec497114c124eaabbb96f643cb20dfb24d0618be4934c19c4062f82fa71
-
SHA512
43ab24a193c2c5698c4a6d5fb6122f29204109dd608c1bd936be5104f2da29d3996cfdf6b20cbfc2d83559f0b2691f6f6dd9d098fc0ef4710b0e0b5997249bbf
-
SSDEEP
12288:Rqh702iNpEmR/B4C0UW6Tggk3PuhB4QJP1vwY1LFUFWs8JTEc72d/DW7UKt:d1BWU7ggnhfrvwY15UIDhAg
Static task
static1
Behavioral task
behavioral1
Sample
c1d74ec41c57e24503bb5f05117a0215.exe
Resource
win7-20220901-en
Malware Config
Extracted
formbook
4.1
hn73
medusaams.com
ekyas.com
deadandcompanyindianapolis.net
winnersclub.live
gozero.buzz
sdmfeh.xyz
rikfiri.com
happyworld.tech
oculusquest2linkcable.com
cksexdoll.top
aitechconsulting.net
prstampsevery.shop
kioskdz.com
fogg.productions
7gu7x5mc.com
thefactoryco.com
dvsmanpowerenterprises.com
dreamwins5.com
bgs-abogados.com
arthursouza.online
bxtopyumer.top
xx8g405.top
top20liberia.com
a1p5.cyou
durableshippingcontainers.com
pyxhi.xyz
eaglesolebuildings.com
panache-qatar.com
ghiencf.com
precist129.fun
beautisoleshoetique.com
ttttttttdsb-sgghdjj.xyz
thenewrakutenjpcardmail.top
yiqunyanyu.com
wedaplv.com
brawlkingz.com
infinatelighting.com
sef-a73gshbyey.kred
laguiadezafra.com
acsintegral.com
xn--gioonline-m6a.com
4f0nfdbmot559s.kred
fatashow.com
kefiiboutique.store
yetkilisi.site
weisswein.vip
drt6g85t.cfd
renderbet202.com
brownshed.net
juodwb.xyz
epiceriemarket.com
687yrx-a7a7ia6et-2.site
deardvd.com
healthpatches.store
evereffect.email
vipfootball.shop
bk3wkhteil.vip
wzbmilenium.com
stefan-rex.com
turksonair.com
popleggings.shop
sometimesthechurchgetupinme.com
dalast.com
jxmghb.com
23votingspree.com
Targets
-
-
Target
c1d74ec41c57e24503bb5f05117a0215.exe
-
Size
873KB
-
MD5
c1d74ec41c57e24503bb5f05117a0215
-
SHA1
47bd6a606edd6229962526f5488c5c8635acc50e
-
SHA256
ab380ec497114c124eaabbb96f643cb20dfb24d0618be4934c19c4062f82fa71
-
SHA512
43ab24a193c2c5698c4a6d5fb6122f29204109dd608c1bd936be5104f2da29d3996cfdf6b20cbfc2d83559f0b2691f6f6dd9d098fc0ef4710b0e0b5997249bbf
-
SSDEEP
12288:Rqh702iNpEmR/B4C0UW6Tggk3PuhB4QJP1vwY1LFUFWs8JTEc72d/DW7UKt:d1BWU7ggnhfrvwY15UIDhAg
-
Formbook payload
-
Suspicious use of SetThreadContext
-