Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
6df7223ea200135833b28ec00c2be897927a27d0adead43e1a6a064d14f4ebfc
-
Size
1.6MB
-
Sample
230418-pxtd1adb7x
-
MD5
cc16d949ef4b2907f9cf10f8c8c63b57
-
SHA1
3a5443907b29f85fb85b4e9163a63bb5c952ef39
-
SHA256
6df7223ea200135833b28ec00c2be897927a27d0adead43e1a6a064d14f4ebfc
-
SHA512
53aca46803c342c6039aaa55cd1480e364d1831e3ab3569524ff0b9116ebba5d6e7d55399619dee5ce2a338dd2da79174a916b4f6a3b8b89caf38d6eec6c9318
-
SSDEEP
24576:8yXReuaaSt8AjK+YOpjWORw51rbOclAQwoN0TssqODnwizzc6gs:r0ZaMjKwpyORC7lAQzsbDw
Static task
static1
Malware Config
Extracted
amadey
3.70
193.201.9.43/plays/chapter/index.php
Targets
-
-
Target
6df7223ea200135833b28ec00c2be897927a27d0adead43e1a6a064d14f4ebfc
-
Size
1.6MB
-
MD5
cc16d949ef4b2907f9cf10f8c8c63b57
-
SHA1
3a5443907b29f85fb85b4e9163a63bb5c952ef39
-
SHA256
6df7223ea200135833b28ec00c2be897927a27d0adead43e1a6a064d14f4ebfc
-
SHA512
53aca46803c342c6039aaa55cd1480e364d1831e3ab3569524ff0b9116ebba5d6e7d55399619dee5ce2a338dd2da79174a916b4f6a3b8b89caf38d6eec6c9318
-
SSDEEP
24576:8yXReuaaSt8AjK+YOpjWORw51rbOclAQwoN0TssqODnwizzc6gs:r0ZaMjKwpyORC7lAQzsbDw
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-