Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d10fd57ed5550212a4bfbb65732c489479c49c888737d3dc818290189fc2e719.exe
-
Size
370KB
-
Sample
240516-b8czhafc29
-
MD5
1f68fe6fc999460d808a243a15232611
-
SHA1
2c5b12ad940e1772b001d85b77c5b86f84b9eb03
-
SHA256
d10fd57ed5550212a4bfbb65732c489479c49c888737d3dc818290189fc2e719
-
SHA512
e5faf7c55297860b5304699e304b5ebe8527f73bf2b7f71d30111712df6eec50e9f38b2930f87c14c762b2143d74ff7ce71953ce261c93a6857193389f8c278f
-
SSDEEP
6144:4iHP5o9P45e/kejyjel3IUIBaouNfiAtC+Qgm7f1vOFqx:4aP5yZDjQgIUIBaoQfieQg61mFqx
Static task
static1
Behavioral task
behavioral1
Sample
d10fd57ed5550212a4bfbb65732c489479c49c888737d3dc818290189fc2e719.exe
Resource
win7-20240221-en
Malware Config
Extracted
amadey
4.21
667bac
http://94.156.68.141
-
install_dir
716b9e4c6b
-
install_file
Dctooux.exe
-
strings_key
8e31b2add27c52b4aedc47b90f997046
-
url_paths
/h9fmdW5/index.php
Targets
-
-
Target
d10fd57ed5550212a4bfbb65732c489479c49c888737d3dc818290189fc2e719.exe
-
Size
370KB
-
MD5
1f68fe6fc999460d808a243a15232611
-
SHA1
2c5b12ad940e1772b001d85b77c5b86f84b9eb03
-
SHA256
d10fd57ed5550212a4bfbb65732c489479c49c888737d3dc818290189fc2e719
-
SHA512
e5faf7c55297860b5304699e304b5ebe8527f73bf2b7f71d30111712df6eec50e9f38b2930f87c14c762b2143d74ff7ce71953ce261c93a6857193389f8c278f
-
SSDEEP
6144:4iHP5o9P45e/kejyjel3IUIBaouNfiAtC+Qgm7f1vOFqx:4aP5yZDjQgIUIBaoQfieQg61mFqx
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-