Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
SecuriteInfo.com.Win32.TrojanX-gen.21462.10764.exe
-
Size
1.5MB
-
Sample
231125-x13e3scc35
-
MD5
09faa9617549b665144b272d4a31b8c5
-
SHA1
e27779e8961a77495bc8b17b4ed34120263d7206
-
SHA256
c233aed58e67dc39ea4793fe6e451e0748c959395abbc39741457b6df59c07aa
-
SHA512
0b9f182af3be2abd774f26919b5e45d7fbedd318af5daa54a3cbf4713b55474e8e7b48a654d7d7a6365f8f58586b234e9221dba61e02b125fd025d20b700678e
-
SSDEEP
24576:2opGDjnvrPpkjos0OtjcFc5kM49dj+IuxWQOIjuJuVvhbqL0HtFcgekRP9dT0WNI:OnvrPGT0Egyudc4tI3bqL0NFchaP9dTy
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.TrojanX-gen.21462.10764.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.TrojanX-gen.21462.10764.exe
Resource
win10v2004-20231020-en
Malware Config
Extracted
risepro
194.49.94.152
Targets
-
-
Target
SecuriteInfo.com.Win32.TrojanX-gen.21462.10764.exe
-
Size
1.5MB
-
MD5
09faa9617549b665144b272d4a31b8c5
-
SHA1
e27779e8961a77495bc8b17b4ed34120263d7206
-
SHA256
c233aed58e67dc39ea4793fe6e451e0748c959395abbc39741457b6df59c07aa
-
SHA512
0b9f182af3be2abd774f26919b5e45d7fbedd318af5daa54a3cbf4713b55474e8e7b48a654d7d7a6365f8f58586b234e9221dba61e02b125fd025d20b700678e
-
SSDEEP
24576:2opGDjnvrPpkjos0OtjcFc5kM49dj+IuxWQOIjuJuVvhbqL0HtFcgekRP9dT0WNI:OnvrPGT0Egyudc4tI3bqL0NFchaP9dTy
Score10/10-
PrivateLoader
PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-