Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

fb4f1f8032...a8.exe

windows7-x64

10

fb4f1f8032...a8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2aab8d83f5c4c2ca50ab0cf0418c6b2dc6685fd302826d8c999b5f1be7317ba8.zip

  • Size

    743KB

  • MD5

    8934ad71581f5c697830f22fb6de057d

  • SHA1

    c82973dcbdc0e56d7ea32c10a218cf6b1c6989fa

  • SHA256

    2aab8d83f5c4c2ca50ab0cf0418c6b2dc6685fd302826d8c999b5f1be7317ba8

  • SHA512

    a9cc931c96d36dee779d511dac87e2b3ecb637acb73e2804e9bbd1814397c8d82602379f481f96b0fd7893168ebba754ee32792cbf9e64b91c2a1fbdf0fbc937

  • SSDEEP

    12288:7jrpWUDiLF06TZ0Mt2eynqVsSA8H1ogNA4ZaJg2GONsLUJmxSmjCxYL0n0nH/6lb:7sU6FlLt2eynqVNA4ogNtZeLKWPN0ilj

Score
10/10
socelars

Malware Config

Extracted

Family

socelars

C2

http://www.iyiqian.com/

http://www.xxhufdc.top/

http://www.uefhkice.xyz/

http://www.wygexde.xyz/

Signatures

  • Socelars family
    socelars
  • Socelars payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2aab8d83f5c4c2ca50ab0cf0418c6b2dc6685fd302826d8c999b5f1be7317ba8.zip
    .zip

    Password: infected

  • fb4f1f80320365984cc24d8b8afe59f21ada1d07ae9862efb407a3c650bd40a8.exe
    .exe windows:6 windows x86 arch:x86

    4f0608b5638c60342069764638589dcf


    Headers

    Imports

    Sections