Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file.exe
-
Size
233KB
-
Sample
221006-ggvm5aggap
-
MD5
5958b7aa607850c6adadedb29dbb9aa9
-
SHA1
9c55f1242cbe3f63c98d32a7c8c3f7a94693dbe7
-
SHA256
15271b6b7836bc5c845d9facc43f97a4503f8f65948ff7d5c0e8aca93d753ac8
-
SHA512
be1c2578771b2ac6043261178a851278754c3bab02a30ae55178cdc9f75c1ab7e8251880ded629fcc246a9cd90c2410d6cbfe16980b8eaa78ac1d0a9fe7a9ab6
-
SSDEEP
3072:skOI4o++PFyMzlLi174dus0sQ5AQK53gvQADoq0NIVN40tUd2beRi/725898O:TCUo74xIZDolNIDrtY2sij25898
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Malware Config
Extracted
nymaim
208.67.104.97
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
233KB
-
MD5
5958b7aa607850c6adadedb29dbb9aa9
-
SHA1
9c55f1242cbe3f63c98d32a7c8c3f7a94693dbe7
-
SHA256
15271b6b7836bc5c845d9facc43f97a4503f8f65948ff7d5c0e8aca93d753ac8
-
SHA512
be1c2578771b2ac6043261178a851278754c3bab02a30ae55178cdc9f75c1ab7e8251880ded629fcc246a9cd90c2410d6cbfe16980b8eaa78ac1d0a9fe7a9ab6
-
SSDEEP
3072:skOI4o++PFyMzlLi174dus0sQ5AQK53gvQADoq0NIVN40tUd2beRi/725898O:TCUo74xIZDolNIDrtY2sij25898
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-