Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
crypto.exe
-
Size
2.8MB
-
Sample
200929-hw5h532be6
-
MD5
0d7f83d89fd30427f41a99c7507a7eeb
-
SHA1
6d28a32854aeb30c782fed36f012b400c54a7fd4
-
SHA256
6a889b99e2ddd3036d7bde02b03ea6ce3474dfb55fb8bc9ed0aa3bb342fa437a
-
SHA512
1c25a43d2a195aaf5a7fefee089ff5b141fd5c5a8b5148eac0f0eb0bbeb64e65a48bd007e1e6367b9ae3f5d3b437b896c843ff79d1365f58b9784417799004ba
Static task
static1
Behavioral task
behavioral1
Sample
crypto.exe
Resource
win7
Behavioral task
behavioral2
Sample
crypto.exe
Resource
win10v200722
Malware Config
Extracted
http://e-service.iag.bg/App_Themes/Efa/clear.txt
Extracted
http://e-service.iag.bg/App_Themes/Efa/video.mp4
Extracted
C:\HELP_DECRYPT_YOUR_FILES.txt
https://t.me/Help_Decrypt
Extracted
C:\HELP_DECRYPT_YOUR_FILES.txt
https://t.me/Help_Decrypt
Targets
-
-
Target
crypto.exe
-
Size
2.8MB
-
MD5
0d7f83d89fd30427f41a99c7507a7eeb
-
SHA1
6d28a32854aeb30c782fed36f012b400c54a7fd4
-
SHA256
6a889b99e2ddd3036d7bde02b03ea6ce3474dfb55fb8bc9ed0aa3bb342fa437a
-
SHA512
1c25a43d2a195aaf5a7fefee089ff5b141fd5c5a8b5148eac0f0eb0bbeb64e65a48bd007e1e6367b9ae3f5d3b437b896c843ff79d1365f58b9784417799004ba
Score10/10-
Clears Windows event logs
-
Blocklisted process makes network request
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-