Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c28cdacbe5077074a2a02f0dcdda32bdd515d3192b54a010d0d8c80a622bef01

  • Size

    632KB

  • MD5

    004f30f6d5158090d621cf2b15cf1cfb

  • SHA1

    c449494b45f7546e1cced529e29a9b8b914d3889

  • SHA256

    c28cdacbe5077074a2a02f0dcdda32bdd515d3192b54a010d0d8c80a622bef01

  • SHA512

    d24f72824e08ea350caff020dea70309663a811fbfe285e502ea06a59c0df7b60c7faa88f3daa0e752e920fcedbc0ffb7231f2120e6aabfe1536893a2d2068b2

  • SSDEEP

    12288:0RfQn+w8EYiBlMkn5f9J105ko8T6csV5R:g4+wlYBsb3zNs5R

Score
10/10

Malware Config

Extracted

Family

sakula

C2

www.polarroute.com

Signatures

  • Sakula family
  • Sakula payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c28cdacbe5077074a2a02f0dcdda32bdd515d3192b54a010d0d8c80a622bef01
    .exe windows:5 windows x86 arch:x86

    4511896d043677e4ab4578dc5bcab5a0


    Headers

    Imports

    Sections