Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
6c348016ee136190e780d6161e8f2710cd830e697f9cd56a3df45bf7ec59867c
-
Size
3.0MB
-
Sample
231219-bfz9bsfhg8
-
MD5
f3aa65fe211931caf9763ef71f7c86f4
-
SHA1
31dc137bee5e8183a6b1fa759ecfa3731c5e7391
-
SHA256
6c348016ee136190e780d6161e8f2710cd830e697f9cd56a3df45bf7ec59867c
-
SHA512
4767d93ae9e165f1d1b0ea34329f23eb579f00b3e35ab21a975c7a48be55c361d5edc8d19d17ce1b573b91dba238c92c743fee306c243de875ea1b0eccfa7221
-
SSDEEP
49152:Y1HS7p1EZKMnkmWg8LX5prviYDyKS5AypQxbRQAo9JnCmpbu/nRFfjI7L0qb:YUHTPJg8z1mKnypSbRxo9JCm
Behavioral task
behavioral1
Sample
6c348016ee136190e780d6161e8f2710cd830e697f9cd56a3df45bf7ec59867c.exe
Resource
win7-20231215-en
Malware Config
Extracted
orcus
Новый тег
31.44.184.52:19705
sudo_9f5ny2o3os3scpkyonv449otgp2yxjfj
-
autostart_method
Disable
-
enable_keylogger
false
-
install_path
%appdata%\javascriptto\testdefault.exe
-
reconnect_delay
10000
-
registry_keyname
Sudik
-
taskscheduler_taskname
sudik
-
watchdog_path
AppData\aga.exe
Targets
-
-
Target
6c348016ee136190e780d6161e8f2710cd830e697f9cd56a3df45bf7ec59867c
-
Size
3.0MB
-
MD5
f3aa65fe211931caf9763ef71f7c86f4
-
SHA1
31dc137bee5e8183a6b1fa759ecfa3731c5e7391
-
SHA256
6c348016ee136190e780d6161e8f2710cd830e697f9cd56a3df45bf7ec59867c
-
SHA512
4767d93ae9e165f1d1b0ea34329f23eb579f00b3e35ab21a975c7a48be55c361d5edc8d19d17ce1b573b91dba238c92c743fee306c243de875ea1b0eccfa7221
-
SSDEEP
49152:Y1HS7p1EZKMnkmWg8LX5prviYDyKS5AypQxbRQAo9JnCmpbu/nRFfjI7L0qb:YUHTPJg8z1mKnypSbRxo9JCm
-
Orcurs Rat Executable
-