Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file.exe
-
Size
1.5MB
-
Sample
231127-zq2f5sch45
-
MD5
a73eb8737506893d1ee4e47b8c08da5b
-
SHA1
072ffce2e4c2ab2aa8cf8a291aafe559f8db62f8
-
SHA256
09f926b67a54852a034cf11e792c0611da71d2e6fae3d5cf3fa7932265c41941
-
SHA512
ce1a318785fbf768c1bf516ab262254b6fea4dedfb1e695bc175b7b7a9e857b6ff6cb4730590e1d1dafffd763b4cd8628de8f5811b569c8737c3a7a3bf66eea8
-
SSDEEP
24576:2opGDjnvrPpkjos0OtjcFc5kM49dj+IuxWQOIjuJuVvhbqL0HtFcgekRP9dT0WNI:OnvrPGT0Egyudc4tI3bqL0NFchaP9dTy
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20231127-en
Malware Config
Extracted
risepro
194.49.94.152
Targets
-
-
Target
file.exe
-
Size
1.5MB
-
MD5
a73eb8737506893d1ee4e47b8c08da5b
-
SHA1
072ffce2e4c2ab2aa8cf8a291aafe559f8db62f8
-
SHA256
09f926b67a54852a034cf11e792c0611da71d2e6fae3d5cf3fa7932265c41941
-
SHA512
ce1a318785fbf768c1bf516ab262254b6fea4dedfb1e695bc175b7b7a9e857b6ff6cb4730590e1d1dafffd763b4cd8628de8f5811b569c8737c3a7a3bf66eea8
-
SSDEEP
24576:2opGDjnvrPpkjos0OtjcFc5kM49dj+IuxWQOIjuJuVvhbqL0HtFcgekRP9dT0WNI:OnvrPGT0Egyudc4tI3bqL0NFchaP9dTy
Score10/10-
PrivateLoader
PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-