Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c5ed85e8c11af4a57d4ed3d4511c0cad.exe
-
Size
348KB
-
Sample
221028-qb3afsgbaq
-
MD5
c5ed85e8c11af4a57d4ed3d4511c0cad
-
SHA1
025695a987afcb517e03b57b7a68aacd4452a21d
-
SHA256
9edf684165900cda2567c388a5ec574bbc6b2c27415cc56e965d5562c4ad1176
-
SHA512
fe19b57bc665c9900da2cb55cfaa9cdd580ad65a9c5bb6ae7f7305b1d1f224529a90b85e71326b99627ebe8f4bb8c67e26a698527021f4a777551c4b00e1f813
-
SSDEEP
6144:kbHpL5/47iaCautdZ6MtiXsGPgZFGHVvJGs:kbHpB47DktdoiMtyFGjGs
Static task
static1
Behavioral task
behavioral1
Sample
c5ed85e8c11af4a57d4ed3d4511c0cad.exe
Resource
win7-20220812-en
Malware Config
Extracted
vidar
55.2
1707
https://t.me/slivetalks
https://c.im/@xinibin420
-
profile_id
1707
Targets
-
-
Target
c5ed85e8c11af4a57d4ed3d4511c0cad.exe
-
Size
348KB
-
MD5
c5ed85e8c11af4a57d4ed3d4511c0cad
-
SHA1
025695a987afcb517e03b57b7a68aacd4452a21d
-
SHA256
9edf684165900cda2567c388a5ec574bbc6b2c27415cc56e965d5562c4ad1176
-
SHA512
fe19b57bc665c9900da2cb55cfaa9cdd580ad65a9c5bb6ae7f7305b1d1f224529a90b85e71326b99627ebe8f4bb8c67e26a698527021f4a777551c4b00e1f813
-
SSDEEP
6144:kbHpL5/47iaCautdZ6MtiXsGPgZFGHVvJGs:kbHpB47DktdoiMtyFGjGs
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-