Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
87f4d0475836f47cdd74afd2cfe0f97f4f2f0b86f4d84f4fe4a6daa6cffc0c53
-
Size
250KB
-
Sample
221202-clxwtsge51
-
MD5
53cce95f5bfb66c6f9a7394a1269afa2
-
SHA1
25534338447d6dd1fd2a660278e570613ef838e4
-
SHA256
87f4d0475836f47cdd74afd2cfe0f97f4f2f0b86f4d84f4fe4a6daa6cffc0c53
-
SHA512
661a2eead2b394302fccafa0c7df71711b9013bef7454313603e95c0093b218dd0fe341b5fc3216ea7c3253f00ccd87247eaf186d91a4fff9032209836af2ef5
-
SSDEEP
6144:Dg3O5R5hgK9vZPf9ZaSKNxphi39NOvpgY:s3O5RsK9Zf9ZafzpK8
Static task
static1
Malware Config
Extracted
amadey
3.50
31.41.244.167/v7eWcjs/index.php
Targets
-
-
Target
87f4d0475836f47cdd74afd2cfe0f97f4f2f0b86f4d84f4fe4a6daa6cffc0c53
-
Size
250KB
-
MD5
53cce95f5bfb66c6f9a7394a1269afa2
-
SHA1
25534338447d6dd1fd2a660278e570613ef838e4
-
SHA256
87f4d0475836f47cdd74afd2cfe0f97f4f2f0b86f4d84f4fe4a6daa6cffc0c53
-
SHA512
661a2eead2b394302fccafa0c7df71711b9013bef7454313603e95c0093b218dd0fe341b5fc3216ea7c3253f00ccd87247eaf186d91a4fff9032209836af2ef5
-
SSDEEP
6144:Dg3O5R5hgK9vZPf9ZaSKNxphi39NOvpgY:s3O5RsK9Zf9ZafzpK8
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-