Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
31bcfdc3940d4984b3f2e237bf766373daf2a97cc5abadcfbc71bd27503a9cc0
-
Size
1.4MB
-
Sample
230417-m9c7fadh22
-
MD5
0d0d935facca028084d99db7ee62c65b
-
SHA1
b7ffa1c35d7063ae5f38f4f12267b3cb8a395060
-
SHA256
31bcfdc3940d4984b3f2e237bf766373daf2a97cc5abadcfbc71bd27503a9cc0
-
SHA512
ba89b4533486fdf86c256e45688052bab2c5b8d57d8cb8fa0ccc825a09cf22edcc0830ce0c8c33d0c46b3bbd34696bc99994f7bd31cd0b2466643d7be3cbe003
-
SSDEEP
24576:Sy3gQ/GHYlIXy8u4RgxVoXiZYCquEsArXu+T6XwVK122Cmf/mPOwjOnELjX0RVUI:5mYT83m/oXiZwOAregg1hCm07j0ELsdx
Static task
static1
Malware Config
Extracted
amadey
3.70
193.201.9.43/plays/chapter/index.php
Targets
-
-
Target
31bcfdc3940d4984b3f2e237bf766373daf2a97cc5abadcfbc71bd27503a9cc0
-
Size
1.4MB
-
MD5
0d0d935facca028084d99db7ee62c65b
-
SHA1
b7ffa1c35d7063ae5f38f4f12267b3cb8a395060
-
SHA256
31bcfdc3940d4984b3f2e237bf766373daf2a97cc5abadcfbc71bd27503a9cc0
-
SHA512
ba89b4533486fdf86c256e45688052bab2c5b8d57d8cb8fa0ccc825a09cf22edcc0830ce0c8c33d0c46b3bbd34696bc99994f7bd31cd0b2466643d7be3cbe003
-
SSDEEP
24576:Sy3gQ/GHYlIXy8u4RgxVoXiZYCquEsArXu+T6XwVK122Cmf/mPOwjOnELjX0RVUI:5mYT83m/oXiZwOAregg1hCm07j0ELsdx
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-