Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b61cdc8a5a907871f98a8df02778399a5d39bb5061b3fd2d498380432bd1232e
-
Size
1.1MB
-
Sample
230423-prgg9aeh8y
-
MD5
abd4c25955ae6ddef35b57fb2a808df7
-
SHA1
acb8227444e55177a034766e663990d44768bf79
-
SHA256
b61cdc8a5a907871f98a8df02778399a5d39bb5061b3fd2d498380432bd1232e
-
SHA512
54ad4b113146ed44c639782b89e260ec4df99b02fc986477720d41c4b589437340b372b7b026931adf85db19eb825036f46107822fc181a14e9e9b1d58e4384e
-
SSDEEP
24576:CyhpGUDuLqYYjoWsyIsIoNGcG4k+cTSHmzarrkbW++FXB:phpGOuLtY2yvIoEyLBHZ2d+
Static task
static1
Malware Config
Extracted
amadey
3.70
212.113.119.255/joomla/index.php
Targets
-
-
Target
b61cdc8a5a907871f98a8df02778399a5d39bb5061b3fd2d498380432bd1232e
-
Size
1.1MB
-
MD5
abd4c25955ae6ddef35b57fb2a808df7
-
SHA1
acb8227444e55177a034766e663990d44768bf79
-
SHA256
b61cdc8a5a907871f98a8df02778399a5d39bb5061b3fd2d498380432bd1232e
-
SHA512
54ad4b113146ed44c639782b89e260ec4df99b02fc986477720d41c4b589437340b372b7b026931adf85db19eb825036f46107822fc181a14e9e9b1d58e4384e
-
SSDEEP
24576:CyhpGUDuLqYYjoWsyIsIoNGcG4k+cTSHmzarrkbW++FXB:phpGOuLtY2yvIoEyLBHZ2d+
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-