Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
7fc493af09b5db4be092f609adb357414e8a2c19bb191421bb057fe1acb2c3ba
-
Size
4.6MB
-
Sample
240109-xdnneahcd6
-
MD5
93c9a67a0f183f4f1d9e3fdc7e8f8e69
-
SHA1
dacbe33276dc970cc778a4f62407ddb1ae65f64e
-
SHA256
7fc493af09b5db4be092f609adb357414e8a2c19bb191421bb057fe1acb2c3ba
-
SHA512
ec623ef15667f28d4e55da66f9846050da1bd78f0664f4d621090962ddd47855a4b4401bfa55253b687b441b0da59aa5c8ad3d50f1676264fb76c0cae54df77e
-
SSDEEP
98304:Qr/6Qib7v2y401+uJM5Opa5iSYasIHvvaNjTfcrXKNWf/8ITZJJ1yK9/4dm8:Y6Qizj+OmOpa5iPnIHa+20dTZL9/4dD
Malware Config
Targets
-
-
Target
7fc493af09b5db4be092f609adb357414e8a2c19bb191421bb057fe1acb2c3ba
-
Size
4.6MB
-
MD5
93c9a67a0f183f4f1d9e3fdc7e8f8e69
-
SHA1
dacbe33276dc970cc778a4f62407ddb1ae65f64e
-
SHA256
7fc493af09b5db4be092f609adb357414e8a2c19bb191421bb057fe1acb2c3ba
-
SHA512
ec623ef15667f28d4e55da66f9846050da1bd78f0664f4d621090962ddd47855a4b4401bfa55253b687b441b0da59aa5c8ad3d50f1676264fb76c0cae54df77e
-
SSDEEP
98304:Qr/6Qib7v2y401+uJM5Opa5iSYasIHvvaNjTfcrXKNWf/8ITZJJ1yK9/4dm8:Y6Qizj+OmOpa5iPnIHa+20dTZL9/4dD
Score10/10-
Detect Socks5Systemz Payload
-
Socks5Systemz
Socks5Systemz is a botnet written in C++.
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-