Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2s -
max time network
3s -
platform
windows7_x64 -
resource
win7v20201028 -
submitted
10/12/2020, 18:39
Static task
static1
Behavioral task
behavioral1
Sample
c81c2c539ccba4c38add72e271fe63a2e389f2f645050289257fc6af4f47a82e.bin.sample.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
c81c2c539ccba4c38add72e271fe63a2e389f2f645050289257fc6af4f47a82e.bin.sample.exe
Resource
win10v20201028
General
-
Target
c81c2c539ccba4c38add72e271fe63a2e389f2f645050289257fc6af4f47a82e.bin.sample.exe
-
Size
3.0MB
-
MD5
1441e78b9e6ce78dd02e7491b25e7f9e
-
SHA1
8c355fd0e062152a403cb0c42412850b60524aac
-
SHA256
c81c2c539ccba4c38add72e271fe63a2e389f2f645050289257fc6af4f47a82e
-
SHA512
52e34a8ea136783e2009700b330e7db32e817ab0420c77e6cf47ab79c385635036ac4b547d6d1ee7542eb1e2e0b88f741289b96bf66dde18f1fdd03cb554d023
Malware Config
Extracted
C:\$Recycle.Bin\INFECTION-HELP.txt
http://corpleaks.net
http://hxt254aygrsziejn.onion
Signatures
-
Drops desktop.ini file(s) 1 IoCs
description ioc Process File opened for modification C:\$Recycle.Bin\S-1-5-21-3825035466-2522850611-591511364-1000\desktop.ini c81c2c539ccba4c38add72e271fe63a2e389f2f645050289257fc6af4f47a82e.bin.sample.exe