Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
7d0814f04c8fae2bc66ef5e5ead82378e63cbb7fe63db2be2da96c975260a958
-
Size
1.2MB
-
Sample
230418-2pel4aeg93
-
MD5
e8f722b649bcd56f6c2303baf196cf98
-
SHA1
19d4b88243581fd559fa7b5682a555ae1ead2c65
-
SHA256
7d0814f04c8fae2bc66ef5e5ead82378e63cbb7fe63db2be2da96c975260a958
-
SHA512
47a40206bf2c1123f5615561f9aaafd9c44540e063f01754b30de37fea5437413407490c5b0a3de346eaa40c2952b8981a9e6d5b556627a7d8c6b102569badda
-
SSDEEP
24576:EypFQe8f+ZCyKcL8H/wdMADZhohybDqTUN66Z:T49jTH/2MATohCN
Static task
static1
Malware Config
Extracted
amadey
3.70
212.113.119.255/joomla/index.php
Targets
-
-
Target
7d0814f04c8fae2bc66ef5e5ead82378e63cbb7fe63db2be2da96c975260a958
-
Size
1.2MB
-
MD5
e8f722b649bcd56f6c2303baf196cf98
-
SHA1
19d4b88243581fd559fa7b5682a555ae1ead2c65
-
SHA256
7d0814f04c8fae2bc66ef5e5ead82378e63cbb7fe63db2be2da96c975260a958
-
SHA512
47a40206bf2c1123f5615561f9aaafd9c44540e063f01754b30de37fea5437413407490c5b0a3de346eaa40c2952b8981a9e6d5b556627a7d8c6b102569badda
-
SSDEEP
24576:EypFQe8f+ZCyKcL8H/wdMADZhohybDqTUN66Z:T49jTH/2MATohCN
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-