Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file.exe
-
Size
5.6MB
-
Sample
230613-spk97sgg78
-
MD5
91e0018d00f5782c53d8d0a5abc51914
-
SHA1
24733e9f058ef81884085eeab0bbe32582775fee
-
SHA256
4e998800b102360f87df8e0d379ace3ba4981f8fc158f1c88c30f494463994a5
-
SHA512
eebfd3435d2105f7a9a3bc369c34c8c061813e4f9a5a7056824c9d37ef641d30e67b6fe75c0d395a440623635f0b5a56f6380b75f0287ba9e647992d0cc0d36e
-
SSDEEP
98304:EDLrpHFOFnyavj0un+/crK8qfB8nzhF1GHdlpG6LVmrV9kpfBqD8m/d4ky3jmlWp:Evr9FO5cu+/KK8qfBwdF1QlpGq0x+/sC
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
file.exe
-
Size
5.6MB
-
MD5
91e0018d00f5782c53d8d0a5abc51914
-
SHA1
24733e9f058ef81884085eeab0bbe32582775fee
-
SHA256
4e998800b102360f87df8e0d379ace3ba4981f8fc158f1c88c30f494463994a5
-
SHA512
eebfd3435d2105f7a9a3bc369c34c8c061813e4f9a5a7056824c9d37ef641d30e67b6fe75c0d395a440623635f0b5a56f6380b75f0287ba9e647992d0cc0d36e
-
SSDEEP
98304:EDLrpHFOFnyavj0un+/crK8qfB8nzhF1GHdlpG6LVmrV9kpfBqD8m/d4ky3jmlWp:Evr9FO5cu+/KK8qfBwdF1QlpGq0x+/sC
Score10/10-
PrivateLoader
PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-