Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a84f13afc66598bc51a2a5fa77633a67.exe
-
Size
37KB
-
Sample
230105-mm81labf77
-
MD5
a84f13afc66598bc51a2a5fa77633a67
-
SHA1
188de3787a2ef16e57062ab794920f9d3957e4f5
-
SHA256
d854634ea4a92c5775d1edaf805c7a754d45e8e568bcda853ddcbde2b891a8e3
-
SHA512
045bd70f7de1d604b3f5fee700658ffe8347b09e2437e16652c0f58078e33a148750a59f581b043fc190bb63e4a8217340f26e476a211b2d6aea741cba416d06
-
SSDEEP
384:i8KvEiTbHvpWNcZ0y8f7CTvvrdLkCwE3rAF+rMRTyN/0L+EcoinblneHQM3epzXg:dKXTZ38f7CTvpFwKrM+rMRa8NusTt
Behavioral task
behavioral1
Sample
a84f13afc66598bc51a2a5fa77633a67.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a84f13afc66598bc51a2a5fa77633a67.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
njrat
im523
HacKed
6.tcp.eu.ngrok.io:11553
99c4d82f0922d38c6f975842331ad8f5
-
reg_key
99c4d82f0922d38c6f975842331ad8f5
-
splitter
|'|'|
Targets
-
-
Target
a84f13afc66598bc51a2a5fa77633a67.exe
-
Size
37KB
-
MD5
a84f13afc66598bc51a2a5fa77633a67
-
SHA1
188de3787a2ef16e57062ab794920f9d3957e4f5
-
SHA256
d854634ea4a92c5775d1edaf805c7a754d45e8e568bcda853ddcbde2b891a8e3
-
SHA512
045bd70f7de1d604b3f5fee700658ffe8347b09e2437e16652c0f58078e33a148750a59f581b043fc190bb63e4a8217340f26e476a211b2d6aea741cba416d06
-
SSDEEP
384:i8KvEiTbHvpWNcZ0y8f7CTvvrdLkCwE3rAF+rMRTyN/0L+EcoinblneHQM3epzXg:dKXTZ38f7CTvpFwKrM+rMRa8NusTt
Score10/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-