Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file.exe
-
Size
524KB
-
Sample
230207-28jedsfe6s
-
MD5
56261e0eec9cf06f0cec7be6dd273f76
-
SHA1
66cad4bbe85128af0d1c4dedad50861a523f4329
-
SHA256
b7120f670580add5d656f32ae0180c8dfd138ca9989403e649d5d642987cec6d
-
SHA512
7c98a2326b0766be552eb90a1a745571afefc5abcb1158c4ce25db8ebb0b0f8eb95a5a029e70d76eba5874119ea0ccb076276c2037f20cf65ae03162f69844bb
-
SSDEEP
12288:nMrOy90zV1m1TW3aOZK5CDlzo0yxz87Mv5ikj:ByIgTOZoCu0yxz87MxB
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
file.exe
-
Size
524KB
-
MD5
56261e0eec9cf06f0cec7be6dd273f76
-
SHA1
66cad4bbe85128af0d1c4dedad50861a523f4329
-
SHA256
b7120f670580add5d656f32ae0180c8dfd138ca9989403e649d5d642987cec6d
-
SHA512
7c98a2326b0766be552eb90a1a745571afefc5abcb1158c4ce25db8ebb0b0f8eb95a5a029e70d76eba5874119ea0ccb076276c2037f20cf65ae03162f69844bb
-
SSDEEP
12288:nMrOy90zV1m1TW3aOZK5CDlzo0yxz87Mv5ikj:ByIgTOZoCu0yxz87MxB
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-