Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
noode.exe
-
Size
4.2MB
-
Sample
241004-q49j8sxdnl
-
MD5
225c37388536e2baac97377392539c05
-
SHA1
106e85c309a70f31ac504215fe33e52c7115113e
-
SHA256
882a455f3229947a48a9ffc328c920705f548c41ee75dbfab2522bfbf0dd6f45
-
SHA512
37cbd732e584790e334cede0a5b23ba9cffaa5dcb0bce20d7beb3b5c6735d5c776206e1c986d74bd9845d1b1a7d588e0ae4ac3c7a61f24b768e034d53f00b93f
-
SSDEEP
98304:NIzZTfL2LMvXiIgZKO+8v7rfYTBVFjgq/trLSAVL8Gmd/:CzpCMvXizQO5kxpnGXR
Static task
static1
Behavioral task
behavioral1
Sample
noode.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
noode.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
noode.exe
-
Size
4.2MB
-
MD5
225c37388536e2baac97377392539c05
-
SHA1
106e85c309a70f31ac504215fe33e52c7115113e
-
SHA256
882a455f3229947a48a9ffc328c920705f548c41ee75dbfab2522bfbf0dd6f45
-
SHA512
37cbd732e584790e334cede0a5b23ba9cffaa5dcb0bce20d7beb3b5c6735d5c776206e1c986d74bd9845d1b1a7d588e0ae4ac3c7a61f24b768e034d53f00b93f
-
SSDEEP
98304:NIzZTfL2LMvXiIgZKO+8v7rfYTBVFjgq/trLSAVL8Gmd/:CzpCMvXizQO5kxpnGXR
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-