Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2306e8a3476e83f56c664762521bcc5dd0941657dc186743f09c44e80b177930
-
Size
1.4MB
-
Sample
230416-1typ4acb69
-
MD5
c6bdc18260b1760b1d1856dacd61d2d7
-
SHA1
8fece4ce8ac4e252dd5861b9aeaddf73c5799f6b
-
SHA256
2306e8a3476e83f56c664762521bcc5dd0941657dc186743f09c44e80b177930
-
SHA512
d7c60bd237d7a06ffbdf58a8c9349795909111f5ddb26a3731309bacfbf2be06e4a421879d993988bd248566487bfedf3781591e11ff2129d30b46b9af9b2425
-
SSDEEP
24576:cyJCz8B+QWc9eY5tshgKmitHbAEQ0yoBKQEb6P8aWo73QfpdZwp:LJCA+QWcwYbsh3mipAE6oLEfaWo7Af6
Static task
static1
Malware Config
Extracted
amadey
3.70
193.201.9.43/plays/chapter/index.php
Targets
-
-
Target
2306e8a3476e83f56c664762521bcc5dd0941657dc186743f09c44e80b177930
-
Size
1.4MB
-
MD5
c6bdc18260b1760b1d1856dacd61d2d7
-
SHA1
8fece4ce8ac4e252dd5861b9aeaddf73c5799f6b
-
SHA256
2306e8a3476e83f56c664762521bcc5dd0941657dc186743f09c44e80b177930
-
SHA512
d7c60bd237d7a06ffbdf58a8c9349795909111f5ddb26a3731309bacfbf2be06e4a421879d993988bd248566487bfedf3781591e11ff2129d30b46b9af9b2425
-
SSDEEP
24576:cyJCz8B+QWc9eY5tshgKmitHbAEQ0yoBKQEb6P8aWo73QfpdZwp:LJCA+QWcwYbsh3mipAE6oLEfaWo7Af6
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-