Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Salex.rar
-
Size
489KB
-
Sample
250115-fmey7atmbj
-
MD5
35027836f30a27f95f89464f4002cf47
-
SHA1
ad8b206ebd77787915928990042185318ed4d1cc
-
SHA256
d820a2843c4dd04b3fb075d45c9f7953f90a97e87a97f934212f4ff74253cd4c
-
SHA512
9c7bf22dfe29a628862d633931a3021433fe4fb2565ede170596a9ae47447230a8ecfd2d150f3dc0c602159227f9152f84ea80a7a3c5e12c134f12e16094fb4e
-
SSDEEP
12288:nqeB8sdAaFgh4VUPLUwi9FYftVKwXZ8UK0BPWt29:nqfaFgyVmAwinYftVVXrdK29
Static task
static1
Behavioral task
behavioral1
Sample
Salex.rar
Resource
win11-20241007-en
Behavioral task
behavioral2
Sample
SalexLoader.exe
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
antiban.dll
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
config1.cfg
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
config2.cfg
Resource
win11-20241007-en
Behavioral task
behavioral6
Sample
engine.dll
Resource
win11-20241007-en
Behavioral task
behavioral7
Sample
wincr.dll
Resource
win11-20241007-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Targets
-
-
Target
Salex.rar
-
Size
489KB
-
MD5
35027836f30a27f95f89464f4002cf47
-
SHA1
ad8b206ebd77787915928990042185318ed4d1cc
-
SHA256
d820a2843c4dd04b3fb075d45c9f7953f90a97e87a97f934212f4ff74253cd4c
-
SHA512
9c7bf22dfe29a628862d633931a3021433fe4fb2565ede170596a9ae47447230a8ecfd2d150f3dc0c602159227f9152f84ea80a7a3c5e12c134f12e16094fb4e
-
SSDEEP
12288:nqeB8sdAaFgh4VUPLUwi9FYftVKwXZ8UK0BPWt29:nqfaFgyVmAwinYftVVXrdK29
-
Lumma family
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
SalexLoader.exe
-
Size
700.0MB
-
MD5
8906c248a6a568a98fd137991edf993b
-
SHA1
2a3bebb2e2e5c510a03769d3624ec62f86942b4e
-
SHA256
6962d770fcd8edee1dc00ad9e5918fce3ef3aedbc2d938f242a09eb5abf67025
-
SHA512
8d7d2551348039f009f846551166d93448e220fbae7b38588bee4682d1da96b0db4f9290eb56418ef6455923cd626dbef9ffbe0eeccbc7602b40ea2eed77613c
-
SSDEEP
384:zmActkV8tbUqcO7jL/z9Nkjn7LhaUyviCWB:zyKOtbhNun7ldwWB
Score1/10 -
-
-
Target
antiban.dll
-
Size
279KB
-
MD5
493e0b6ab748db93771272bd754491f3
-
SHA1
febb8b1271d8619020078a1f6d74170c1d845c9c
-
SHA256
e6faa707f8eb8d1ad465c3ef0b11224d55e7b2ca9c04240deec193dc2ad33999
-
SHA512
5184ada1f3f25b1c987075fbbcbc90275f7a054d6e8700f0dd6d57e566e823a12d072f2bf72934f8d2d46bd46acf5156b719f42d4178683e637a411a64c5f747
-
SSDEEP
6144:9lUZiPhyiSgnUSTTd9GlbbE0TrHnzh9UTBKK:gZiPhyiSgnUS3d9GlvRPnzh9UTQK
Score3/10 -
-
-
Target
config1.cfg
-
Size
848B
-
MD5
660f059de96ae650273eedf2e871e978
-
SHA1
c4f150ba247f16612083a8f75eb7df7978f3ac47
-
SHA256
b9ecd4cd9d045e6f6c446caf4d1bca1d150396bcfb71aa2cdbf8bce7303d60be
-
SHA512
860ebcc81fe4b270f6789ac51ed54b35ab93e7a56fd70301108aa651bba6a38440a625f48f1ed9bda87d3e849fa024c52acc5ac5e71c2e9cd46fa0991be8f7b1
Score3/10 -
-
-
Target
config2.cfg
-
Size
18KB
-
MD5
5fab28899d2ad58ca0a7385ecd292dc0
-
SHA1
fbd8abcce4da8d078c73098d9c341785214b41c5
-
SHA256
8b407622142e523ef950feb5899be35061d03ba93e84972d2c72a156eb69430e
-
SHA512
1a0435c62a80839216ec1a88c131322fea81910104fd7f9bdc9edb9dbac6fce3928ba80d8d8a53b16e77405199a77c65836373b5d808e7a2266db41536623935
-
SSDEEP
384:3BhwCLGneULPZnst1Bdm772dKWXhTiY6UomW+zGWX8uuM:3mnst1Bdm7a8WXpgZWXruM
Score3/10 -
-
-
Target
engine.dll
-
Size
279KB
-
MD5
493e0b6ab748db93771272bd754491f3
-
SHA1
febb8b1271d8619020078a1f6d74170c1d845c9c
-
SHA256
e6faa707f8eb8d1ad465c3ef0b11224d55e7b2ca9c04240deec193dc2ad33999
-
SHA512
5184ada1f3f25b1c987075fbbcbc90275f7a054d6e8700f0dd6d57e566e823a12d072f2bf72934f8d2d46bd46acf5156b719f42d4178683e637a411a64c5f747
-
SSDEEP
6144:9lUZiPhyiSgnUSTTd9GlbbE0TrHnzh9UTBKK:gZiPhyiSgnUS3d9GlvRPnzh9UTQK
Score3/10 -
-
-
Target
wincr.dll
-
Size
320.0MB
-
MD5
d248bc2a89f90993966e708fbf03c2d5
-
SHA1
c5916462456370da9602bb6e64b032b6d00903ff
-
SHA256
e8382b8686ce3cba6f69459ed235f74581ddd04a5392924c74b8a0d773eefb98
-
SHA512
1d7d44f957f750f1a26cf0c10ce34ab2ffddafb0b9b99f423a593ba3b8d852b8f14f8b144a234966a44f5b8c090c24d8094c353b6aa618492dc1dcc15a0be71d
-
SSDEEP
24576:kbUsKq9KXqY0VVAQBhg/MmacjCCvlvKCt6jKiO0QF66SyZeC:kXY0nAQBhg/MFcjCCvlvKCt6S0Q
Score3/10 -