Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
173774379c0d5346e0190fcdf79d9b7e3d0d48c5b7144c5a7c9d705fa2b33de8
-
Size
260KB
-
Sample
221030-3as2lsedf8
-
MD5
a18b2ef764c34e590a0ff3a217794419
-
SHA1
4789f6baa4ea41b281caf90c35f6c73ae97d6fc4
-
SHA256
173774379c0d5346e0190fcdf79d9b7e3d0d48c5b7144c5a7c9d705fa2b33de8
-
SHA512
dff144a60f244990f2345ff38c55c019ee6c15b904b7c36a228ea43695a53c7d032555cff3fbca0df29bc156fbf8350a9900d1040b29b2bcb60d36fc5b8a316b
-
SSDEEP
6144:CFfLbt7jhOqOhvV64JQhhapDVcxJY8qeh:KfLbtRO9thDVcwrM
Static task
static1
Behavioral task
behavioral1
Sample
173774379c0d5346e0190fcdf79d9b7e3d0d48c5b7144c5a7c9d705fa2b33de8.dll
Resource
win7-20220901-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
http://klkjwre77638dfqwieuoi888.info/
Targets
-
-
Target
173774379c0d5346e0190fcdf79d9b7e3d0d48c5b7144c5a7c9d705fa2b33de8
-
Size
260KB
-
MD5
a18b2ef764c34e590a0ff3a217794419
-
SHA1
4789f6baa4ea41b281caf90c35f6c73ae97d6fc4
-
SHA256
173774379c0d5346e0190fcdf79d9b7e3d0d48c5b7144c5a7c9d705fa2b33de8
-
SHA512
dff144a60f244990f2345ff38c55c019ee6c15b904b7c36a228ea43695a53c7d032555cff3fbca0df29bc156fbf8350a9900d1040b29b2bcb60d36fc5b8a316b
-
SSDEEP
6144:CFfLbt7jhOqOhvV64JQhhapDVcxJY8qeh:KfLbtRO9thDVcwrM
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-