Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
6fc629fbf3a2155e080a6c65fde3db4fe84c3e818c20a3b4b9fb39242cbb2361.zip
-
Size
285KB
-
Sample
221114-lqnndsbf6t
-
MD5
1615e4e6c9c61609bae00344c2e03d0b
-
SHA1
f52448c01bcf308f7c20d4874b57b8c4028cda83
-
SHA256
947bbee2817ee45e71b7aa0085e505146b725ead646a5b6d19125cc11d2c45f1
-
SHA512
75fb324cc058bc78c9c0369d5d2603d30ab27620d6bd75ead21a32e23b6fe14d78c08666076ddf153b475924dcbe1f1fd4f107049cc733c4648c82da20b44549
-
SSDEEP
6144:g2I/8rp2yEj59alZpDnzPQoemquD3UKU9RZ2hRjAw0JBW2Wg9N:Es2yE9sZpDDQo9quLUXRInYJZW2N
Static task
static1
Behavioral task
behavioral1
Sample
6fc629fbf3a2155e080a6c65fde3db4fe84c3e818c20a3b4b9fb39242cbb2361.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6fc629fbf3a2155e080a6c65fde3db4fe84c3e818c20a3b4b9fb39242cbb2361.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
fickerstealer
game2030.site:80
Targets
-
-
Target
6fc629fbf3a2155e080a6c65fde3db4fe84c3e818c20a3b4b9fb39242cbb2361.exe
-
Size
556KB
-
MD5
0e7d5f23ce2fdc3320d257a952444609
-
SHA1
2b421eb8c9e27b5bdd113d1f45054d8eafa48726
-
SHA256
6fc629fbf3a2155e080a6c65fde3db4fe84c3e818c20a3b4b9fb39242cbb2361
-
SHA512
33b168293d0e192df369d7d4afff1915038179803782c4225a5cd6fcb26405eceba7c93045d27acbecbc4f6d9af0cc415a460988d95f207f7379c043e7495332
-
SSDEEP
6144:IaqPFf30Cjo4qbLoa3+iAn9z/ax02ngRlyMnx1CByTqsV90MW0rLAb56dpLN4XQq:BqVjZq/ow+DnoS2ngRlh1CByTQMW0rw3
Score10/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-