Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9e1887f21bf94167d4ec38cec590af717e1b1ab8ade241f0830d95b81b2a0f42
-
Size
230KB
-
Sample
221010-3hlbqseae4
-
MD5
6cff1618a26be5f029d42bd6f1d8e89a
-
SHA1
41e07a7837d5c8f8a41b6fd4060d0a5e967a06ea
-
SHA256
9e1887f21bf94167d4ec38cec590af717e1b1ab8ade241f0830d95b81b2a0f42
-
SHA512
932616ae31fe92c262bce9c6cb27acb7b8b79542fa1a1772f23b3ee3c1ef3a780251fabaa0ba6580776f48cd3b36d1a1fb02f1629d95dc2f2b3ccfdc9eb7952c
-
SSDEEP
3072:3e6Dvi5JVE+1vMjRETBuRgUGK2gNgWQEAGxFBLbqy/NJZCOZA1pVk0WECz1DPu7B:LYGJNJ/ZANzWfRW7cOP
Static task
static1
Behavioral task
behavioral1
Sample
9e1887f21bf94167d4ec38cec590af717e1b1ab8ade241f0830d95b81b2a0f42.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
9e1887f21bf94167d4ec38cec590af717e1b1ab8ade241f0830d95b81b2a0f42
-
Size
230KB
-
MD5
6cff1618a26be5f029d42bd6f1d8e89a
-
SHA1
41e07a7837d5c8f8a41b6fd4060d0a5e967a06ea
-
SHA256
9e1887f21bf94167d4ec38cec590af717e1b1ab8ade241f0830d95b81b2a0f42
-
SHA512
932616ae31fe92c262bce9c6cb27acb7b8b79542fa1a1772f23b3ee3c1ef3a780251fabaa0ba6580776f48cd3b36d1a1fb02f1629d95dc2f2b3ccfdc9eb7952c
-
SSDEEP
3072:3e6Dvi5JVE+1vMjRETBuRgUGK2gNgWQEAGxFBLbqy/NJZCOZA1pVk0WECz1DPu7B:LYGJNJ/ZANzWfRW7cOP
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-