Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    BlackSkullV2.exe

  • Size

    51KB

  • MD5

    07eabc6db5de229a160ef35ef2520b93

  • SHA1

    2000b5046d2cfe5efe9ef9fe2c781a0e2362cb59

  • SHA256

    f045fb1743e8dc5132304b897f9582ddf01881d76b3d34af97a5114157c1ed5e

  • SHA512

    e4ebd9577a2f6e2e41d9214dce243d63bee6f4e98562df659647b5e37fd16c9624ae7068607563e55314f40a10be7d5dd3c22875446b69b6b5b182edc2118ec4

  • SSDEEP

    1536:kp8nwtTplnav3iWvSLkhm1SDdxYEokbz:O+wtTpln9oeqdaEf

Score
10/10

Malware Config

Extracted

Family

limerat

Attributes
  • aes_key

    123499

  • antivm

    false

  • c2_url

    https://pastebin.com/raw/zwppgXcp

  • delay

    3

  • download_payload

    false

  • install

    false

  • install_name

    WindowsServices.exe

  • main_folder

    Temp

  • pin_spread

    false

  • sub_folder

    \

  • usb_spread

    false

Signatures

  • Limerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • BlackSkullV2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.