Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1796369efda4442ef49a2806580302388e3013e0f118741ef545dd7a32ec7ce0
-
Size
80KB
-
Sample
240822-kky2haxdph
-
MD5
a5cd8fc525b13f71b9051df0df4c81bc
-
SHA1
b03143816c1bce1584a7b010049ccaf1bb61b539
-
SHA256
1796369efda4442ef49a2806580302388e3013e0f118741ef545dd7a32ec7ce0
-
SHA512
4d565650babf1c64299fa8d917e1c0e4cdd15820fde47891f5a8e027f260b6e731fbad0d3636e5bb239a0df2b6669b453c044857b9967311e47b7c2efefb038b
-
SSDEEP
1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOTpas:GhfxHNIreQm+Hispas
Static task
static1
Behavioral task
behavioral1
Sample
1796369efda4442ef49a2806580302388e3013e0f118741ef545dd7a32ec7ce0.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1796369efda4442ef49a2806580302388e3013e0f118741ef545dd7a32ec7ce0.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
qqpass
http://www.zigui.org/article.php?id=103822
-
url
http://www.mxm9191.com/myrunner_up.exe
-
user_agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Targets
-
-
Target
1796369efda4442ef49a2806580302388e3013e0f118741ef545dd7a32ec7ce0
-
Size
80KB
-
MD5
a5cd8fc525b13f71b9051df0df4c81bc
-
SHA1
b03143816c1bce1584a7b010049ccaf1bb61b539
-
SHA256
1796369efda4442ef49a2806580302388e3013e0f118741ef545dd7a32ec7ce0
-
SHA512
4d565650babf1c64299fa8d917e1c0e4cdd15820fde47891f5a8e027f260b6e731fbad0d3636e5bb239a0df2b6669b453c044857b9967311e47b7c2efefb038b
-
SSDEEP
1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOTpas:GhfxHNIreQm+Hispas
Score10/10-
Qqpass family
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-
Drops file in System32 directory
-