Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
00ad5304c186001d365d8fa95bb11d0e564fb2c3f9cbf83de1ba2e1ccf4d9654
-
Size
470KB
-
Sample
240616-nlfs4avgrq
-
MD5
4ace07145854a92831c064a173100383
-
SHA1
dea1676e2b6d7033686333948ff6f810d12e3793
-
SHA256
00ad5304c186001d365d8fa95bb11d0e564fb2c3f9cbf83de1ba2e1ccf4d9654
-
SHA512
2bfa8b49b4113f1b22017a9a56b2fe22875dabb384e2b49e4b388f051630a47b4cb6c895e1ee75e836ffb9eecebb2cdb31e32f298bfed905a4a9ef92aa46a2f4
-
SSDEEP
6144:J10iMdXq004Q3kLnfJKASLdDw6g5VSJKRa5FvJiAIhWXqAEIOubTi:ZkXD04DLnfyDIrRwJiuqH/8
Static task
static1
Behavioral task
behavioral1
Sample
00ad5304c186001d365d8fa95bb11d0e564fb2c3f9cbf83de1ba2e1ccf4d9654.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
amadey
4.19
8fc809
http://nudump.com
http://otyt.ru
http://selltix.org
-
install_dir
b739b37d80
-
install_file
Dctooux.exe
-
strings_key
65bac8d4c26069c29f1fd276f7af33f3
-
url_paths
/forum/index.php
/forum2/index.php
/forum3/index.php
Targets
-
-
Target
00ad5304c186001d365d8fa95bb11d0e564fb2c3f9cbf83de1ba2e1ccf4d9654
-
Size
470KB
-
MD5
4ace07145854a92831c064a173100383
-
SHA1
dea1676e2b6d7033686333948ff6f810d12e3793
-
SHA256
00ad5304c186001d365d8fa95bb11d0e564fb2c3f9cbf83de1ba2e1ccf4d9654
-
SHA512
2bfa8b49b4113f1b22017a9a56b2fe22875dabb384e2b49e4b388f051630a47b4cb6c895e1ee75e836ffb9eecebb2cdb31e32f298bfed905a4a9ef92aa46a2f4
-
SSDEEP
6144:J10iMdXq004Q3kLnfJKASLdDw6g5VSJKRa5FvJiAIhWXqAEIOubTi:ZkXD04DLnfyDIrRwJiuqH/8
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-