Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    u1900519.exe

  • Size

    332KB

  • MD5

    31b4c58f0363d6b570bd272aeb732af9

  • SHA1

    7d5d36d0c2a7b7a0394feee9be9918024751430c

  • SHA256

    af16ab947b3c560f6f3d6650ac3e5f13c03b135a3461430a969394546a98a14b

  • SHA512

    c801f950500d86d31d4355db66a5cf8061d3086288f6f3f39a894feb210a9f091fbb95b6d94a46e09f600bdebc09f845baf622ea3cb4cb6f61c7119ddd4bad16

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.87

C2

77.91.68.18/nice/index.php

Attributes
  • install_dir

    b40d11255d

  • install_file

    saves.exe

  • strings_key

    fa622dfc42544927a6471829ee1fa9fe

rc4.plain
1
006700e5a2ab05704bbb0c589b88924d

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • u1900519.exe
    .exe windows x86

    44e769941d2c6ad88bf42ac4adb36135


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.