Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ea07b2d53fa8793d39a63f4f787e3951cf3eb9fab05cc5a2b5cd3e303c241c10
-
Size
1.0MB
-
Sample
230422-kgyassdg92
-
MD5
fb14cf3dd84d331ed72129de2a093f16
-
SHA1
5cddc307f102158e0a091b2fa38bc64fa4c09fd8
-
SHA256
ea07b2d53fa8793d39a63f4f787e3951cf3eb9fab05cc5a2b5cd3e303c241c10
-
SHA512
bd19a4989dea36fc0d82d8236c5bf550c8238d6dc918ec7d3448a3c181cd35df7239e1d5dc0052e089976086698e42f2340edf4b159d4f3e3bca127befe1d226
-
SSDEEP
24576:Hy8NLbMkSWsyEPh9NDRtC26hSW7jvFnyn:S8NLbMkjEZ9N7C26sWdy
Static task
static1
Malware Config
Extracted
amadey
3.70
212.113.119.255/joomla/index.php
Targets
-
-
Target
ea07b2d53fa8793d39a63f4f787e3951cf3eb9fab05cc5a2b5cd3e303c241c10
-
Size
1.0MB
-
MD5
fb14cf3dd84d331ed72129de2a093f16
-
SHA1
5cddc307f102158e0a091b2fa38bc64fa4c09fd8
-
SHA256
ea07b2d53fa8793d39a63f4f787e3951cf3eb9fab05cc5a2b5cd3e303c241c10
-
SHA512
bd19a4989dea36fc0d82d8236c5bf550c8238d6dc918ec7d3448a3c181cd35df7239e1d5dc0052e089976086698e42f2340edf4b159d4f3e3bca127befe1d226
-
SSDEEP
24576:Hy8NLbMkSWsyEPh9NDRtC26hSW7jvFnyn:S8NLbMkjEZ9N7C26sWdy
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-