Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-08-03_1ed4f7087d455ac137f304bfa417def5_avoslocker_qakbot
-
Size
1.2MB
-
Sample
240804-aa6y9azdmm
-
MD5
1ed4f7087d455ac137f304bfa417def5
-
SHA1
c2f60d7c5bb26e297aff9118d3357b475272a96f
-
SHA256
20f2746e7f5ce76ba65f0fdb57375ad5822942178f8eb940f6206d7ef982b408
-
SHA512
b1b933ebc2edddb65cb28393258e09ab5e06c8de85f5dbb7144fb442f2540bff84b3da7f627d0dd4380df034d201affbdd90fabbacd4ce7769b05ad633b9ef8c
-
SSDEEP
24576:yzd9Sm6s3SB4VbhzGcHb0bBhXxtyesOlU0YOTAXnA91IV7HExDaIg:yzTSmvdcwb0VhXHlrTKA91IV7HExOIg
Behavioral task
behavioral1
Sample
2024-08-03_1ed4f7087d455ac137f304bfa417def5_avoslocker_qakbot.exe
Resource
win7-20240729-en
Malware Config
Targets
-
-
Target
2024-08-03_1ed4f7087d455ac137f304bfa417def5_avoslocker_qakbot
-
Size
1.2MB
-
MD5
1ed4f7087d455ac137f304bfa417def5
-
SHA1
c2f60d7c5bb26e297aff9118d3357b475272a96f
-
SHA256
20f2746e7f5ce76ba65f0fdb57375ad5822942178f8eb940f6206d7ef982b408
-
SHA512
b1b933ebc2edddb65cb28393258e09ab5e06c8de85f5dbb7144fb442f2540bff84b3da7f627d0dd4380df034d201affbdd90fabbacd4ce7769b05ad633b9ef8c
-
SSDEEP
24576:yzd9Sm6s3SB4VbhzGcHb0bBhXxtyesOlU0YOTAXnA91IV7HExDaIg:yzTSmvdcwb0VhXHlrTKA91IV7HExOIg
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Uses Tor communications
Malware can proxy its traffic through Tor for more anonymity.
-