Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ed7d60f74076a97893c5a11f5128081e4b3d21980f26c56c0fefb9d8adbbc0b0
-
Size
344KB
-
Sample
221030-b2ppqagchn
-
MD5
9305b0fc624cdf2ae5e0c069c38f6c61
-
SHA1
6e739419d7876626ab033544ba2f10767625279d
-
SHA256
ed7d60f74076a97893c5a11f5128081e4b3d21980f26c56c0fefb9d8adbbc0b0
-
SHA512
e307c3e42ca80458a49de16c51ec210f95a9203943442278d46d580ce42a718bd201b1b6e80dcb7f805ee0d7c7a913d15b4164ab0264bceda976dc5f7c482a6c
-
SSDEEP
6144:VlNAs2LVa9Ef6SSy5okFx9xAPyvxubce:Vcs2LgECSSOXEyvxubc
Static task
static1
Behavioral task
behavioral1
Sample
ed7d60f74076a97893c5a11f5128081e4b3d21980f26c56c0fefb9d8adbbc0b0.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
ed7d60f74076a97893c5a11f5128081e4b3d21980f26c56c0fefb9d8adbbc0b0
-
Size
344KB
-
MD5
9305b0fc624cdf2ae5e0c069c38f6c61
-
SHA1
6e739419d7876626ab033544ba2f10767625279d
-
SHA256
ed7d60f74076a97893c5a11f5128081e4b3d21980f26c56c0fefb9d8adbbc0b0
-
SHA512
e307c3e42ca80458a49de16c51ec210f95a9203943442278d46d580ce42a718bd201b1b6e80dcb7f805ee0d7c7a913d15b4164ab0264bceda976dc5f7c482a6c
-
SSDEEP
6144:VlNAs2LVa9Ef6SSy5okFx9xAPyvxubce:Vcs2LgECSSOXEyvxubc
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-