Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2852-15-0x...ry.exe

windows7-x64

2852-15-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2852-15-0x00000000007E0000-0x000000000082A000-memory.dmp

  • Size

    296KB

  • MD5

    050e1608a7cb7f9f79e03ee69e225995

  • SHA1

    40d04c470bb07d5b2629c376e904d652f4e53281

  • SHA256

    14634d34f73450674b3d0691544b8db1b54d671e9d459c5060b003a78ad1849d

  • SHA512

    c4b515b676b3e4562fc58fadb6c422443bd54e820683080b820ea615dde67ab6073fd4b12f797cf6990d7a185082b1af4ea837f07d1eaf419e1b5120867b4830

  • SSDEEP

    3072:ni8zGMcOGgRcO+X+uSeSQShSySXS5S3VXmNqpxKdks/3pH4nX86GWBNbfsHkmiLT:yVtVuZJ/QtCIDo3KX9GWBNb4eWb

Score
10/10
keyloggerstealervipkeylogger

Malware Config

Extracted

Family

vipkeylogger

C2

https://api.telegram.org/bot8124032214:AAHsMb8ZSRX6oiufFz1tRalXrmGjYujuzB4/sendMessage?chat_id=6198188190

Signatures

  • Vipkeylogger family
    vipkeylogger
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2852-15-0x00000000007E0000-0x000000000082A000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections