Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0x00060000000162e0-52.dat
-
Size
313KB
-
Sample
231011-nl46paca5y
-
MD5
b1ddc0d016640f8f31dee59948bfeea8
-
SHA1
d10117c0c5a2ce9adddb84ab3c067f43b5f39a36
-
SHA256
afb4cab6dbc47b044fb8b0deb6a7ec9368062bbce0d553cbafce4156052d45fd
-
SHA512
01aee10e6bbf78866921d178f906123579606be83d4f58275ea3cc47a365d51111470e12ef0744c6b3f509887caa4ad54831cdf72f2bfe780317cc684ed3360a
-
SSDEEP
6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq
Behavioral task
behavioral1
Sample
0x00060000000162e0-52.exe
Resource
win7-20230831-en
Malware Config
Extracted
amadey
3.87
http://77.91.68.18/nice/index.php
-
install_dir
b40d11255d
-
install_file
saves.exe
-
strings_key
fa622dfc42544927a6471829ee1fa9fe
Targets
-
-
Target
0x00060000000162e0-52.dat
-
Size
313KB
-
MD5
b1ddc0d016640f8f31dee59948bfeea8
-
SHA1
d10117c0c5a2ce9adddb84ab3c067f43b5f39a36
-
SHA256
afb4cab6dbc47b044fb8b0deb6a7ec9368062bbce0d553cbafce4156052d45fd
-
SHA512
01aee10e6bbf78866921d178f906123579606be83d4f58275ea3cc47a365d51111470e12ef0744c6b3f509887caa4ad54831cdf72f2bfe780317cc684ed3360a
-
SSDEEP
6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-