Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
x4350340.exe
-
Size
277KB
-
Sample
230904-bxd3esde83
-
MD5
fd502539db882fced169e65f67a0b7fe
-
SHA1
67c6de2da96c062fa951673895a987fba3df5819
-
SHA256
2135f8c4487bd40e7348236598f4dfd2fef648cabc0e5a9b74990a9f85eae431
-
SHA512
4e7ffa35f0988dabc2f2db38a73557db6d19547e1910dde1f1890bd732a89dc3eda66fd8ea80f43b6796bba11440f5811d44f6b3c75114880036c54e2843edae
-
SSDEEP
6144:KYy+bnr+4p0yN90QExeI8XniuYKLW0YjrR2auQL:4Mr0y90C7/hUl2A
Static task
static1
Behavioral task
behavioral1
Sample
x4350340.exe
Resource
win7-20230831-en
Malware Config
Extracted
amadey
3.87
77.91.68.18/nice/index.php
-
install_dir
b40d11255d
-
install_file
saves.exe
-
strings_key
fa622dfc42544927a6471829ee1fa9fe
Targets
-
-
Target
x4350340.exe
-
Size
277KB
-
MD5
fd502539db882fced169e65f67a0b7fe
-
SHA1
67c6de2da96c062fa951673895a987fba3df5819
-
SHA256
2135f8c4487bd40e7348236598f4dfd2fef648cabc0e5a9b74990a9f85eae431
-
SHA512
4e7ffa35f0988dabc2f2db38a73557db6d19547e1910dde1f1890bd732a89dc3eda66fd8ea80f43b6796bba11440f5811d44f6b3c75114880036c54e2843edae
-
SSDEEP
6144:KYy+bnr+4p0yN90QExeI8XniuYKLW0YjrR2auQL:4Mr0y90C7/hUl2A
-
Detects Healer an antivirus disabler dropper
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1