Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d59a4848b584fdd93eb3d0b554a8df58.bin

  • Size

    1.2MB

  • MD5

    b8ea0bbaaf9ea094c3963cbab3cdd2e7

  • SHA1

    910ca707077c9b73a92e1d508c9415e5b71fbf38

  • SHA256

    8d771b6c61479c87bcdb257351f7a9290bc4adf2f3d20a047fc256c149e931a2

  • SHA512

    a520fc33afce149af95d93e31d5b2ef6093a4e5711715a55d2b249f265d6afd95f4611de2105bf1d9a1b2f91c2a70c0b750000e7d259aa4d40614a68d64335c3

  • SSDEEP

    24576:jVH2bAzfiEyUBl3b+C0TFAN0D8YK/Xs8nQ0vsUUTXIgPK9v3y:WUfFyUBlLlYAEU6jS9fy

Score
10/10

Malware Config

Signatures

  • Ermac family
  • Ermac2 payload 1 IoCs
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 15 IoCs

Files

  • d59a4848b584fdd93eb3d0b554a8df58.bin
    .zip

    Password: infected

  • 32e4dee58ea17addc5df4ffb862ab3a8df1697598cb6437f92de4075665812c2.zip
    .apk android

    Password: infected

    com.gejalevubakupa.sugi

    com.gejalevubakupa.sugi.duso