Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

4dadde2cc7...4f.exe

windows7-x64

10

4dadde2cc7...4f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0046f06d419e3a965c3e115a64ec32c78e35004e344798d3f23d8f5248309284.zip

  • Size

    722KB

  • MD5

    282a74bbeb5432fe3e22870d23f2f7e6

  • SHA1

    0d6edaccb4a6891e8e31745ec8306ffe7d0aac7c

  • SHA256

    0046f06d419e3a965c3e115a64ec32c78e35004e344798d3f23d8f5248309284

  • SHA512

    563d699a251cb7cc351cd75bff9b78c1a0eb098e9599fa83f70fec7c13b50699c85bfa20c2354d2c9d4e2c77fd95a530e202b050c16560d4625be50f04efcf52

  • SSDEEP

    12288:TeI2RFmsO/BBr0l932GN9u6Qi1Jg6e03Zr1efaf7l6RtEgeUu8z9M:TtgFmsO/C9GGN9YAg8DefaDK2

Score
10/10
socelars

Malware Config

Extracted

Family

socelars

C2

http://www.fddnice.pw/

http://www.sokoinfo.pw/

http://www.zzhlike.pw/

http://www.wygexde.xyz/

Signatures

  • Socelars family
    socelars
  • Socelars payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0046f06d419e3a965c3e115a64ec32c78e35004e344798d3f23d8f5248309284.zip
    .zip

    Password: infected

  • 4dadde2cc75cc00a99017299ecfe878299c6c6742ce3abbb198cb440b6b3ce4f.exe
    .exe windows:6 windows x86 arch:x86

    4f0608b5638c60342069764638589dcf


    Headers

    Imports

    Sections