Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

969144d6e9...a8.exe

windows7-x64

1

969144d6e9...a8.exe

windows10-2004-x64

1

c84ea674c6...98.exe

windows7-x64

1

c84ea674c6...98.exe

windows10-2004-x64

1

e3e4078405...2b.exe

windows7-x64

1

e3e4078405...2b.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aurora.7z

  • Size

    1.0MB

  • MD5

    735f6b2a79cf241b7b836e0bb52763bb

  • SHA1

    a35f6b99f337fb1f459502b3d28e3ba9f80ae7f8

  • SHA256

    f15403f70c935d54e256387bbf14c328a2cfaf520a540fdb72b8227769efba23

  • SHA512

    6fa2037d42d9223ddcb24e9a45cb7854552d9d2b57f5d8d62d92fd30c1b04be9fb6b3c2805dfadcae30b966714087a4b6cf2612c73625a8034d08b984c1921d2

  • SSDEEP

    24576:7tewoLRYop0vhyLO/kPs123HSxRGqMcluSnuOc4cPK/X5WvITUvrbaD:7teLqoKYc3BxRG/a5uh4cPSyIQXC

Score
10/10
aurora

Malware Config

Extracted

Family

aurora

C2

116.203.245.173:8081

45.15.156.97:8081

Signatures

  • Aurora family
    aurora
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • aurora.7z
    .7z
  • 969144d6e9de993fc39d812c12c5365860b8b5fafb829c07c0f60d2e5f0bf7a8.bin
    .exe windows:6 windows x64 arch:x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections

  • c84ea674c690003b2244745dbc393831d73c54e27336c3e55b1e0e43ccc5c998.bin
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • e3e40784051801ddfda49a199bc6c49d2e4cdf3359e3872259e09716990e522b.bin
    .exe windows:6 windows x64 arch:x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections