Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Nicht bestätigt 961354.crdownload
-
Size
20.5MB
-
Sample
231113-rjwnbada6t
-
MD5
e90c068938f94007bb753a5360f71935
-
SHA1
8467f19d0eee8bf2eff1b05d23dc6a23fef091db
-
SHA256
d332de690f202780e5bedbaeeafac4d45a1d8a02e0d8267a5603d452ee7c1b07
-
SHA512
f4f8d24d68d4179fc626d5a6cfbbd8adfb8c714876e5889d35b6a5fb54222fc042a6e95daf0fa60ae9da51d62f208d48cc08b42e16992af678e9d1b8594263bc
-
SSDEEP
393216:5Wvz+XOVzpICtL+9qzTfgD7fEUyIeY/Vt1WomY:Ez+XOxKA+9q/fq7fEbITpmY
Behavioral task
behavioral1
Sample
Nicht bestätigt 961354.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
Nicht bestätigt 961354.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
Gengar-Woofer.pyc
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
Gengar-Woofer.pyc
Resource
win10v2004-20231023-en
Malware Config
Targets
-
-
Target
Nicht bestätigt 961354.crdownload
-
Size
20.5MB
-
MD5
e90c068938f94007bb753a5360f71935
-
SHA1
8467f19d0eee8bf2eff1b05d23dc6a23fef091db
-
SHA256
d332de690f202780e5bedbaeeafac4d45a1d8a02e0d8267a5603d452ee7c1b07
-
SHA512
f4f8d24d68d4179fc626d5a6cfbbd8adfb8c714876e5889d35b6a5fb54222fc042a6e95daf0fa60ae9da51d62f208d48cc08b42e16992af678e9d1b8594263bc
-
SSDEEP
393216:5Wvz+XOVzpICtL+9qzTfgD7fEUyIeY/Vt1WomY:Ez+XOxKA+9q/fq7fEbITpmY
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
-
-
Target
Gengar-Woofer.pyc
-
Size
69KB
-
MD5
407059d6ded69e6246e4d3cfc18d017c
-
SHA1
dd73db2f8a43504eecdc5cccc408d6873ced2f9b
-
SHA256
aba29b7d54b9c53d5e6d1e527ca1f819dfc649fd1f2a3ff0960e132e2b3cbf7c
-
SHA512
9bf8276c3c4f0f70e619705c10868685317b4a49384f644c0894a0b8ef6f259502d120bdd725521ec76807825470d52a3f790e5c42d404b229963f7c854f000a
-
SSDEEP
768:058S3Irw/gMxvCWUL8OsvPi3K2nFcWAXTxcPdCA79/GleK1AnjdRnrBIvy:0XIrYv+SNxjlJKpVrJ
Score3/10 -