Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f36a432c4115ed6bded01f130bd82c164e3329fb41a97114e159d74d3380db9b
-
Size
856KB
-
Sample
221030-b2ff2sfdh7
-
MD5
92c0ba97d17fc60449d8da8d0b0689b0
-
SHA1
70bc3b8da5b44b1c6ea927ca4e1a7ce6cf7a30a1
-
SHA256
f36a432c4115ed6bded01f130bd82c164e3329fb41a97114e159d74d3380db9b
-
SHA512
2cc3a6a04aa7566111788fc602cf05d9cd4bb620e56e5ee2a7097b256c7a6eb3e2e449a14e1418d14c7c88c19d21541a8554968478f03a9c8586a775c516cb95
-
SSDEEP
12288:PXQQXlKsrM6VKYnNPFqjOipJbk936F3qWX4SwzAFx:4QVKsrBNA6kJbcqQWX4gn
Static task
static1
Behavioral task
behavioral1
Sample
f36a432c4115ed6bded01f130bd82c164e3329fb41a97114e159d74d3380db9b.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
f36a432c4115ed6bded01f130bd82c164e3329fb41a97114e159d74d3380db9b
-
Size
856KB
-
MD5
92c0ba97d17fc60449d8da8d0b0689b0
-
SHA1
70bc3b8da5b44b1c6ea927ca4e1a7ce6cf7a30a1
-
SHA256
f36a432c4115ed6bded01f130bd82c164e3329fb41a97114e159d74d3380db9b
-
SHA512
2cc3a6a04aa7566111788fc602cf05d9cd4bb620e56e5ee2a7097b256c7a6eb3e2e449a14e1418d14c7c88c19d21541a8554968478f03a9c8586a775c516cb95
-
SSDEEP
12288:PXQQXlKsrM6VKYnNPFqjOipJbk936F3qWX4SwzAFx:4QVKsrBNA6kJbcqQWX4gn
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-