Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1d45374b46c82a682797573c724eacdc_JC.exe
-
Size
378KB
-
Sample
231001-nqagwabg49
-
MD5
1d45374b46c82a682797573c724eacdc
-
SHA1
632e0062c53712a8c8ec71174bac34b81a758e70
-
SHA256
fda2a0883de1ffd5a2187e451067dd13e928ff4966af92a68e97515a8246498d
-
SHA512
e0fda598baf0c052ba8eea18ad2047e5c97f67bcabeba1040200b031fb2d2b2c160c8e2e940aa4d54053699eeda67b7268884f1b180ccd5568809ed53bd810a8
-
SSDEEP
6144:YVTarW9Q2dT6VPAKovnQUvmmAF7J77777S40XB8:YVmrW9HGPGvnQUvmmAF7J77777SnXB8
Static task
static1
Behavioral task
behavioral1
Sample
1d45374b46c82a682797573c724eacdc_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1d45374b46c82a682797573c724eacdc_JC.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
Protocol: ftp- Host:
ftp.byethost12.com - Port:
21 - Username:
b12_8082975 - Password:
951753zx
Extracted
Protocol: ftp- Host:
ftp.tripod.com - Port:
21 - Username:
onthelinux - Password:
741852abc
Targets
-
-
Target
1d45374b46c82a682797573c724eacdc_JC.exe
-
Size
378KB
-
MD5
1d45374b46c82a682797573c724eacdc
-
SHA1
632e0062c53712a8c8ec71174bac34b81a758e70
-
SHA256
fda2a0883de1ffd5a2187e451067dd13e928ff4966af92a68e97515a8246498d
-
SHA512
e0fda598baf0c052ba8eea18ad2047e5c97f67bcabeba1040200b031fb2d2b2c160c8e2e940aa4d54053699eeda67b7268884f1b180ccd5568809ed53bd810a8
-
SSDEEP
6144:YVTarW9Q2dT6VPAKovnQUvmmAF7J77777S40XB8:YVmrW9HGPGvnQUvmmAF7J77777SnXB8
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-