Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
6a89644addc79580fa2d77d92a381c34c5b1509e6321a62c2ae9eb802fe505cd
-
Size
119KB
-
Sample
221011-wvml1ahbcm
-
MD5
69c751c5c99532d4598d3538e7d6e6c1
-
SHA1
c0b04aa6d97ed2d899e4d46d75a329c7be96981e
-
SHA256
6a89644addc79580fa2d77d92a381c34c5b1509e6321a62c2ae9eb802fe505cd
-
SHA512
b5f7a930b105a428ec79c1aca2c092e81a2b7eb3c4fa32de56be32e9927c4b67e075c00bdd87e466e60e15802f80f9dd872491e83f78cb9c9c5377e88dc0cfcd
-
SSDEEP
1536:fJUvF58R/CEYq6yAfQiBiN6yjIl8g4oI1+42BEVpzID1EUJNw7KjMaG5aC+aFPpN:fWvFAXYq8cN6nne+gfK6+QaG5pFkml
Static task
static1
Behavioral task
behavioral1
Sample
6a89644addc79580fa2d77d92a381c34c5b1509e6321a62c2ae9eb802fe505cd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6a89644addc79580fa2d77d92a381c34c5b1509e6321a62c2ae9eb802fe505cd.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
pony
http://taxisamritsar.com/forum/viewtopic.php
http://gilkjones.com/forum/viewtopic.php
http://directgrid.biz/forum/viewtopic.php
http://directgrid.com/forum/viewtopic.php
-
payload_url
http://0326a33.netsolhost.com/568h.exe
http://raylan.com/ejQ88c.exe
http://chipconveyors.co.in/MTRUvt.exe
http://www.hvh-immo.de/YcA3S.exe
Targets
-
-
Target
6a89644addc79580fa2d77d92a381c34c5b1509e6321a62c2ae9eb802fe505cd
-
Size
119KB
-
MD5
69c751c5c99532d4598d3538e7d6e6c1
-
SHA1
c0b04aa6d97ed2d899e4d46d75a329c7be96981e
-
SHA256
6a89644addc79580fa2d77d92a381c34c5b1509e6321a62c2ae9eb802fe505cd
-
SHA512
b5f7a930b105a428ec79c1aca2c092e81a2b7eb3c4fa32de56be32e9927c4b67e075c00bdd87e466e60e15802f80f9dd872491e83f78cb9c9c5377e88dc0cfcd
-
SSDEEP
1536:fJUvF58R/CEYq6yAfQiBiN6yjIl8g4oI1+42BEVpzID1EUJNw7KjMaG5aC+aFPpN:fWvFAXYq8cN6nne+gfK6+QaG5pFkml
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-