Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
YoudaoDict_fanyiweb_itr.exe.v
-
Size
147.2MB
-
Sample
240919-rrdsgashle
-
MD5
f9fede1d45dcbc0be983c0a97fd59dc9
-
SHA1
ebadaaaf4a69c1f0c859b43a4a7de5a974a25c83
-
SHA256
379fa44a41583c492ba699f7321d2c32565e3ca54167f97b30ed58fde6f06149
-
SHA512
01582a582b9648d467d1ffb3e767edfb8e9c1c43ce8c4829efc26115411e75df0c6099b3f9a153763d53ba87f290b519af36eebc87e71fb7326fe5e1d42df5e6
-
SSDEEP
3145728:PrJWeuCMi8mRlR1QxJ/wCFeO7c30JPxzNW9piyj4w5OlvIxi5BM9Sxr:PrJWzC78+c/wCFeO700JPxhW7iyjb5Or
Static task
static1
Behavioral task
behavioral1
Sample
YoudaoDict_fanyiweb_itr.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
YoudaoDict_fanyiweb_itr.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
YoudaoDict_fanyiweb_itr.exe.v
-
Size
147.2MB
-
MD5
f9fede1d45dcbc0be983c0a97fd59dc9
-
SHA1
ebadaaaf4a69c1f0c859b43a4a7de5a974a25c83
-
SHA256
379fa44a41583c492ba699f7321d2c32565e3ca54167f97b30ed58fde6f06149
-
SHA512
01582a582b9648d467d1ffb3e767edfb8e9c1c43ce8c4829efc26115411e75df0c6099b3f9a153763d53ba87f290b519af36eebc87e71fb7326fe5e1d42df5e6
-
SSDEEP
3145728:PrJWeuCMi8mRlR1QxJ/wCFeO7c30JPxzNW9piyj4w5OlvIxi5BM9Sxr:PrJWzC78+c/wCFeO700JPxhW7iyjb5Or
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-