Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9506eb12e2099544d52dc7bfed76bc685c46c82b571240118aa8a7b1f1b71197
-
Size
120KB
-
Sample
220919-rh2syagbfq
-
MD5
5efa72b1cf6ecc5968b223c9f7926918
-
SHA1
adbac836b8f18148da3ca8a5896b0fe8b900d097
-
SHA256
9506eb12e2099544d52dc7bfed76bc685c46c82b571240118aa8a7b1f1b71197
-
SHA512
f7684683f7fd5ad7d5e9ff88563a4e28b233fb3277c9ebbc506f4d1a70fb3979fa2f062c67154d0526b16da82b6746eece7997ac7770f316ef923431befe3b08
-
SSDEEP
1536:/OPqATkyCRIuShTXzEYzbBuvQofWkDnywg8N0XOCOzLwYYbkDGj5qx:/OPqdIRNXz9b8IofW4nhxw0XpY2Gj0x
Static task
static1
Behavioral task
behavioral1
Sample
9506eb12e2099544d52dc7bfed76bc685c46c82b571240118aa8a7b1f1b71197.dll
Resource
win7-20220901-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
9506eb12e2099544d52dc7bfed76bc685c46c82b571240118aa8a7b1f1b71197
-
Size
120KB
-
MD5
5efa72b1cf6ecc5968b223c9f7926918
-
SHA1
adbac836b8f18148da3ca8a5896b0fe8b900d097
-
SHA256
9506eb12e2099544d52dc7bfed76bc685c46c82b571240118aa8a7b1f1b71197
-
SHA512
f7684683f7fd5ad7d5e9ff88563a4e28b233fb3277c9ebbc506f4d1a70fb3979fa2f062c67154d0526b16da82b6746eece7997ac7770f316ef923431befe3b08
-
SSDEEP
1536:/OPqATkyCRIuShTXzEYzbBuvQofWkDnywg8N0XOCOzLwYYbkDGj5qx:/OPqdIRNXz9b8IofW4nhxw0XpY2Gj0x
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-