Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
96bb80b4222de01ae55177be9970289f47b6b0a06816babdb2c46617cc1f6844
-
Size
132KB
-
Sample
221003-ba5a4ahge3
-
MD5
6fcfa238c22b762164f54bb9f6f22780
-
SHA1
bdd4e8b8abe41e5f0f2550636a4854da49a3fc7b
-
SHA256
96bb80b4222de01ae55177be9970289f47b6b0a06816babdb2c46617cc1f6844
-
SHA512
6425438f7aacb9668d9ac11b89984a8c48ff038f7e91028ba69839a9a98ccaa0586fc7a2babe49c8f9facf944f50d984f29c60973a06319d77740c5269817636
-
SSDEEP
3072:gBWZgOFGPLCAvn6elVApl38m/WWmeFS1/vw:/DQ44VOlsm/WMS1A
Static task
static1
Behavioral task
behavioral1
Sample
96bb80b4222de01ae55177be9970289f47b6b0a06816babdb2c46617cc1f6844.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
96bb80b4222de01ae55177be9970289f47b6b0a06816babdb2c46617cc1f6844.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
pony
http://mail.yaklasim.com:8080/forum/viewtopic.php
http://116.122.158.195:8080/forum/viewtopic.php
http://mobileincomeopportunities.com/forum/viewtopic.php
http://mobiletextopportunity.com/forum/viewtopic.php
-
payload_url
http://foto.studio505.cl/wydcTSs.exe
http://lozanoadjusters.com/te904Wik.exe
http://wiregrasstv.com/2hWc6s.exe
Targets
-
-
Target
96bb80b4222de01ae55177be9970289f47b6b0a06816babdb2c46617cc1f6844
-
Size
132KB
-
MD5
6fcfa238c22b762164f54bb9f6f22780
-
SHA1
bdd4e8b8abe41e5f0f2550636a4854da49a3fc7b
-
SHA256
96bb80b4222de01ae55177be9970289f47b6b0a06816babdb2c46617cc1f6844
-
SHA512
6425438f7aacb9668d9ac11b89984a8c48ff038f7e91028ba69839a9a98ccaa0586fc7a2babe49c8f9facf944f50d984f29c60973a06319d77740c5269817636
-
SSDEEP
3072:gBWZgOFGPLCAvn6elVApl38m/WWmeFS1/vw:/DQ44VOlsm/WMS1A
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-