Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d239cd46b0931830bd18f733ec04b3839d643612aa6d4b7da8d0733c60e36a92
-
Size
5.5MB
-
Sample
240707-ggprwaverk
-
MD5
51822f63aedbaf61c516427df51378ad
-
SHA1
c3b226e5d1f3df3ef6a925304cc90b96de5d024d
-
SHA256
d239cd46b0931830bd18f733ec04b3839d643612aa6d4b7da8d0733c60e36a92
-
SHA512
1d41d181454143593e555db6e23f001944489741b2935f362a517cdea3e7d20c9c9238538474be172d00222d3789107721d7c67c08f1b5dc29dcf3752c66d8bf
-
SSDEEP
98304:Ci45Z5Wbf3/qb3yr/IMh5OZ/gLsRIqJ4IQsbaNJ2n0kvRlSTZ8qyFONASHiQxN:A5Z5Wb3a3yA8M4OH4IQrJ2n7/MNASCQH
Malware Config
Targets
-
-
Target
d239cd46b0931830bd18f733ec04b3839d643612aa6d4b7da8d0733c60e36a92
-
Size
5.5MB
-
MD5
51822f63aedbaf61c516427df51378ad
-
SHA1
c3b226e5d1f3df3ef6a925304cc90b96de5d024d
-
SHA256
d239cd46b0931830bd18f733ec04b3839d643612aa6d4b7da8d0733c60e36a92
-
SHA512
1d41d181454143593e555db6e23f001944489741b2935f362a517cdea3e7d20c9c9238538474be172d00222d3789107721d7c67c08f1b5dc29dcf3752c66d8bf
-
SSDEEP
98304:Ci45Z5Wbf3/qb3yr/IMh5OZ/gLsRIqJ4IQsbaNJ2n0kvRlSTZ8qyFONASHiQxN:A5Z5Wb3a3yA8M4OH4IQrJ2n7/MNASCQH
Score10/10-
Detect Socks5Systemz Payload
-
Socks5Systemz
Socks5Systemz is a botnet written in C++.
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-