Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.64fd68d92d8b8c0a516b87584f97a8a0.exe
-
Size
220KB
-
Sample
231101-rg23baec83
-
MD5
64fd68d92d8b8c0a516b87584f97a8a0
-
SHA1
68a3d4ecee0a7d38cf830c8ea9d8b5743903f1b9
-
SHA256
6ff9140480c21154a131767079789c6ad25c5b9c83c99e65d62b72f7e09d0349
-
SHA512
f8a56eeb2fbf71ed34ec82ffff5aedbeb9052504dcbbc37cf1360a11756f658f8297b87a3fa1f5ff1424aca277747cf929d48a0674499df65b165f9dfd82d3d4
-
SSDEEP
6144:DEPAc72ss5pKL93yMax7pH3F2d1ugMeSWp:DE32xpoaxBFg1ugMeS
Behavioral task
behavioral1
Sample
NEAS.64fd68d92d8b8c0a516b87584f97a8a0.exe
Resource
win7-20231020-en
Malware Config
Extracted
amadey
3.89
http://77.91.124.1/theme/index.php
-
install_dir
fefffe8cea
-
install_file
explothe.exe
-
strings_key
36a96139c1118a354edf72b1080d4b2f
Targets
-
-
Target
NEAS.64fd68d92d8b8c0a516b87584f97a8a0.exe
-
Size
220KB
-
MD5
64fd68d92d8b8c0a516b87584f97a8a0
-
SHA1
68a3d4ecee0a7d38cf830c8ea9d8b5743903f1b9
-
SHA256
6ff9140480c21154a131767079789c6ad25c5b9c83c99e65d62b72f7e09d0349
-
SHA512
f8a56eeb2fbf71ed34ec82ffff5aedbeb9052504dcbbc37cf1360a11756f658f8297b87a3fa1f5ff1424aca277747cf929d48a0674499df65b165f9dfd82d3d4
-
SSDEEP
6144:DEPAc72ss5pKL93yMax7pH3F2d1ugMeSWp:DE32xpoaxBFg1ugMeS
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-