Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a93351aaee3ad5b5e34ef555912315cc7beab40b4ac0d20977b2f8e7e09a92a8
-
Size
9.6MB
-
Sample
231121-gs7f3acg38
-
MD5
73d6fd5f282acd34b59bce59153fbf93
-
SHA1
39ead17bbc7bc3f5e1fd43311e73fe808366928d
-
SHA256
a93351aaee3ad5b5e34ef555912315cc7beab40b4ac0d20977b2f8e7e09a92a8
-
SHA512
c8185c7a3efa51aa4a7869dc7348fc1b9283f6761dcdc6dbc6bef7a5acb465336f9cea2d39b95fd0d526fb4435d8f3730ce4a81cd60d8939ed190ba052ce69ad
-
SSDEEP
196608:CrIYWV5l08p/2iFtpPfwCBk0FNhYfU8PwU0/7J3EagHs7LS+KTnlC9Jr:CvWVn//5F7PfwCB7FbQXwhlL/LSDTS9
Behavioral task
behavioral1
Sample
MobaXterm/MobaXterm_CHS.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
MobaXterm/MobaXterm_CHS.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral3
Sample
MobaXterm/ips2.pdf
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
MobaXterm/ips2.pdf
Resource
win10v2004-20231023-en
Malware Config
Targets
-
-
Target
MobaXterm/MobaXterm_CHS.exe
-
Size
13.2MB
-
MD5
bf2a4dd4ce5460619fc06598331e09fc
-
SHA1
8ab85212717c5cfcf94bf6e65af4a01b22a92fe3
-
SHA256
0233cfde67a859e82e35dd9ccc3b6b9536d99f9dda04dc625985fa9d1cd5ecc3
-
SHA512
6a8e3bba9562734ec173705f96c0aa9981eed9d146adcb9eed4e4661faca9c88b5ce49b59adaec1e9c4901bf9fc607aeb22d00780e4c4c67763aa4e9156c7856
-
SSDEEP
196608:u96otEmKakt0ZWMwmlbR0Gj4qyPL9iX68ZgYe/RJ/0wW9sZHYycPdNGRrz:HuWyV/jlgZw/gr9hJHY/PMf
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
MobaXterm/ips2.rules
-
Size
618KB
-
MD5
56c066e15aa273247708ed4affb0e65e
-
SHA1
d4ddb57c5bcd6e330aef7ea06639334245abc497
-
SHA256
283b5656f6cb0bf43d19d4bfaf89498d9028be1f5092f9e60c4f484afd18cdf8
-
SHA512
6f29bde98f4b8a402b8561fe54c7112318efe65572d83efb2c6f8864e8fefb92279ed9cdab7baabe7b51482170c8ef3583d4f02fe6601bdede82ba13ef3073c7
-
SSDEEP
6144:PoHiVNlp85+mBhHRYfY8H+LOF49dOyRG0xw30/LHsPN7FT2qy:PGSmJuDHvFK8yRG0xw30/LHsPNhT2qy
Score1/10 -