Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c68dd6becf7ff5f43ae83924cd67613c
-
Size
3.3MB
-
Sample
240313-wwr8waea34
-
MD5
c68dd6becf7ff5f43ae83924cd67613c
-
SHA1
2f95861167f6fc5dc9b9ae46460b052fa789e73f
-
SHA256
3df4f87d41a548e7cd16ee0bd11ce89e6c74681ca2d5741eed38238a91d5f415
-
SHA512
832bc830f2728dd9b6509d39c092ff123ef85e58367eba9c0c55c0ec3d0e6194ee37c090dfc6638f5fb05151447ee3fee6c38f1818baaafc3be2e856cf55e846
-
SSDEEP
98304:xqj4BFusRGZRQCgaTf0tRy/SdDXsZ1iCvLUBsK5n:xsVZLERFdAZ1TLUCKp
Static task
static1
Malware Config
Extracted
nullmixer
http://watira.xyz/
Extracted
smokeloader
pub5
Extracted
vidar
39.8
706
https://xeronxikxxx.tumblr.com/
-
profile_id
706
Extracted
redline
AniOLD
liezaphare.xyz:80
Extracted
smokeloader
2020
http://aucmoney.com/upload/
http://thegymmum.com/upload/
http://atvcampingtrips.com/upload/
http://kuapakualaman.com/upload/
http://renatazarazua.com/upload/
http://nasufmutlu.com/upload/
Targets
-
-
Target
c68dd6becf7ff5f43ae83924cd67613c
-
Size
3.3MB
-
MD5
c68dd6becf7ff5f43ae83924cd67613c
-
SHA1
2f95861167f6fc5dc9b9ae46460b052fa789e73f
-
SHA256
3df4f87d41a548e7cd16ee0bd11ce89e6c74681ca2d5741eed38238a91d5f415
-
SHA512
832bc830f2728dd9b6509d39c092ff123ef85e58367eba9c0c55c0ec3d0e6194ee37c090dfc6638f5fb05151447ee3fee6c38f1818baaafc3be2e856cf55e846
-
SSDEEP
98304:xqj4BFusRGZRQCgaTf0tRy/SdDXsZ1iCvLUBsK5n:xsVZLERFdAZ1TLUCKp
-
Detect Fabookie payload
-
PrivateLoader
PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
SectopRAT payload
-
Nirsoft
-
Vidar Stealer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-