Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0x0006000000014b97-127.dat
-
Size
205KB
-
Sample
230616-hjp14add62
-
MD5
32587b3c81da526ac2a63d4a5ada0dc4
-
SHA1
d9f173531b78c902bff5beaafc4360633613f7c2
-
SHA256
f57dc054008a6db763dd0d87619bbafd55ff81301a6d858d3e7a1f585ab21c36
-
SHA512
9b5607b2ca9bd22aaee28409b7487c2603de9088d52c32cd930dd3ec7f398e5da0cfde67036249c364bfdab6f6508b33f1a68abf3dbe475adb3d8563b048eb6a
-
SSDEEP
3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj
Behavioral task
behavioral1
Sample
0x0006000000014b97-127.exe
Resource
win7-20230220-en
Malware Config
Extracted
amadey
3.84
77.91.68.63/doma/net/index.php
Targets
-
-
Target
0x0006000000014b97-127.dat
-
Size
205KB
-
MD5
32587b3c81da526ac2a63d4a5ada0dc4
-
SHA1
d9f173531b78c902bff5beaafc4360633613f7c2
-
SHA256
f57dc054008a6db763dd0d87619bbafd55ff81301a6d858d3e7a1f585ab21c36
-
SHA512
9b5607b2ca9bd22aaee28409b7487c2603de9088d52c32cd930dd3ec7f398e5da0cfde67036249c364bfdab6f6508b33f1a68abf3dbe475adb3d8563b048eb6a
-
SSDEEP
3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-