Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
necurs
-
Size
1008KB
-
Sample
240708-wc1qxatbmg
-
MD5
6e05e84c7a993880409d7a0324c10e74
-
SHA1
4cac8146d54c5e47ec1c31a04c3cafdec9fbf209
-
SHA256
ffb1150bbb28d53f325b00445be935cd657c1d8061ba73e91af5b343b6c0d438
-
SHA512
4a4fa48ce31abea8cab4ca176f9d5be4b1b9b9c45c574f2e3605eaf04fd2fbd3da37d464300b2954623b0b9d377cff0a47d082b7fc1cc82a6d3eeab87555d43a
-
SSDEEP
24576:XiB1Q0SPpqqUGB9Qe5k04Q9RGuRUEy3FKEdeybpk/w:XJ/PMq3B9Qet1pyVbNbGo
Static task
static1
Behavioral task
behavioral1
Sample
necurs.exe
Resource
win7-20240708-en
Malware Config
Extracted
dridex
0.79.198.234:6811
59.14.232.108:13510
153.85.116.88:34145
109.165.79.26:57028
3.48.31.250:32970
198.99.233.8:64668
4.144.183.219:57415
170.9.63.116:12621
82.190.146.50:8956
110.106.233.26:61144
231.170.120.138:36240
104.89.112.76:49715
14.217.137.57:20854
108.38.229.252:62814
53.121.3.237:39876
97.219.18.138:20575
120.178.203.178:46408
220.127.249.215:18420
172.217.87.204:28067
175.53.142.26:45560
79.177.200.36:30665
157.53.112.14:24571
153.64.214.166:12471
194.48.95.77:18925
214.85.249.68:28066
93.79.182.194:29244
163.13.32.46:46047
212.205.92.244:21860
78.97.217.240:615
27.202.220.101:53936
252.185.46.233:2507
77.1.238.136:37717
193.168.14.54:56242
105.57.199.109:43871
200.238.177.51:3233
85.228.35.145:11145
59.131.81.227:54421
15.222.176.191:6899
9.206.11.51:18566
232.151.55.193:27910
39.208.106.42:4425
169.226.218.62:61091
180.83.120.180:7070
54.176.49.3:647
75.118.155.164:7951
104.171.164.255:43691
109.160.209.120:49272
252.155.180.35:47395
163.11.41.2:47224
244.234.153.216:39994
56.244.68.190:27859
166.237.100.149:43076
86.94.58.103:48991
152.74.37.2:25716
151.80.170.213:57489
107.89.39.94:16844
163.136.199.107:31768
125.209.93.158:53991
97.41.143.176:8565
221.48.11.129:23678
8.13.230.253:18487
235.112.166.200:64292
151.59.48.34:19843
198.172.0.182:37881
185.163.199.76:45269
208.48.251.238:56606
129.164.223.85:59804
127.209.188.0:6400
144.15.158.66:43476
38.156.205.253:33
185.0.0.0:0
Targets
-
-
Target
necurs
-
Size
1008KB
-
MD5
6e05e84c7a993880409d7a0324c10e74
-
SHA1
4cac8146d54c5e47ec1c31a04c3cafdec9fbf209
-
SHA256
ffb1150bbb28d53f325b00445be935cd657c1d8061ba73e91af5b343b6c0d438
-
SHA512
4a4fa48ce31abea8cab4ca176f9d5be4b1b9b9c45c574f2e3605eaf04fd2fbd3da37d464300b2954623b0b9d377cff0a47d082b7fc1cc82a6d3eeab87555d43a
-
SSDEEP
24576:XiB1Q0SPpqqUGB9Qe5k04Q9RGuRUEy3FKEdeybpk/w:XJ/PMq3B9Qet1pyVbNbGo
-
Executes dropped EXE
-
Loads dropped DLL
-