Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0x0009000000022bd2-12.dat
-
Size
1.3MB
-
Sample
231126-2b89jscf91
-
MD5
2844efe0844c9380019625b729e7f72f
-
SHA1
efb02fccd42e9e67bbce543049baf15df64952de
-
SHA256
527a39d90a1b75475beeee91fe24da641b4e52f7403d0e73beba6cfa619ca0b1
-
SHA512
1da5ed9cf2c144558d6eb4c725358092c53e2e5c16a799b9ede1690e9c1a8579fb9eed0484849b29e8ad1ad4c50f4892415d6ad04ade6c3c909eb09372c2b580
-
SSDEEP
24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJZrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TRrK5Zln2i6
Behavioral task
behavioral1
Sample
0x0009000000022bd2-12.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
0x0009000000022bd2-12.exe
Resource
win10v2004-20231023-en
Malware Config
Extracted
risepro
194.49.94.152
Targets
-
-
Target
0x0009000000022bd2-12.dat
-
Size
1.3MB
-
MD5
2844efe0844c9380019625b729e7f72f
-
SHA1
efb02fccd42e9e67bbce543049baf15df64952de
-
SHA256
527a39d90a1b75475beeee91fe24da641b4e52f7403d0e73beba6cfa619ca0b1
-
SHA512
1da5ed9cf2c144558d6eb4c725358092c53e2e5c16a799b9ede1690e9c1a8579fb9eed0484849b29e8ad1ad4c50f4892415d6ad04ade6c3c909eb09372c2b580
-
SSDEEP
24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJZrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TRrK5Zln2i6
Score10/10-
PrivateLoader
PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-