Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d37165c47edcae96a7843b36a0318c9952392a35ee8bcac2e9189e3ff3cba19a
-
Size
419KB
-
Sample
221003-et2abshabp
-
MD5
49df1c0f2bc10888b8db96796d49ade1
-
SHA1
aabf45e7c02ce455cac386ab142ac604ede20213
-
SHA256
d37165c47edcae96a7843b36a0318c9952392a35ee8bcac2e9189e3ff3cba19a
-
SHA512
07c09c5a88b657669dddc50bdc60704809c0bb96495c493c51ad955c195c5cc656411af11192864f8ce18c09ed5057b3960cb3b37a8ed7548c622298be29705f
-
SSDEEP
6144:l4t2erG8qsCN2rBIpLlYvw1bhu8v4GoSb5hJFMU3BMJsF97AlBf3hAOsXpGAL:XerGblbpiIoSbLJFMU36+mBqOsZZL
Behavioral task
behavioral1
Sample
d37165c47edcae96a7843b36a0318c9952392a35ee8bcac2e9189e3ff3cba19a.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
d37165c47edcae96a7843b36a0318c9952392a35ee8bcac2e9189e3ff3cba19a
-
Size
419KB
-
MD5
49df1c0f2bc10888b8db96796d49ade1
-
SHA1
aabf45e7c02ce455cac386ab142ac604ede20213
-
SHA256
d37165c47edcae96a7843b36a0318c9952392a35ee8bcac2e9189e3ff3cba19a
-
SHA512
07c09c5a88b657669dddc50bdc60704809c0bb96495c493c51ad955c195c5cc656411af11192864f8ce18c09ed5057b3960cb3b37a8ed7548c622298be29705f
-
SSDEEP
6144:l4t2erG8qsCN2rBIpLlYvw1bhu8v4GoSb5hJFMU3BMJsF97AlBf3hAOsXpGAL:XerGblbpiIoSbLJFMU36+mBqOsZZL
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-