Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
37bf19531b49d2c47c2b4af16bc69850df0691e7dd4229a6a883193b50685ced
-
Size
206KB
-
Sample
221030-cek9fsgag9
-
MD5
93dfc059eca953f965daffbd5bfdcc20
-
SHA1
6c65353faf17815857e0bb474681eb42c5291978
-
SHA256
37bf19531b49d2c47c2b4af16bc69850df0691e7dd4229a6a883193b50685ced
-
SHA512
2c18b9600ebd9fec54cd2f774cb2ebcec11a1c0030f233ddbe555e4378ee39c9025b9448bb2f550203abbc9d28e5513637409a3b7ce65cb33e38ce128bdb6cee
-
SSDEEP
3072:rkqoCl/YgjxEufVU0TbTyDDalbyCH99X5tpX2vz4eAILUr:rjLqdufVUNDar9JHX2vEI0
Static task
static1
Behavioral task
behavioral1
Sample
37bf19531b49d2c47c2b4af16bc69850df0691e7dd4229a6a883193b50685ced.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
37bf19531b49d2c47c2b4af16bc69850df0691e7dd4229a6a883193b50685ced
-
Size
206KB
-
MD5
93dfc059eca953f965daffbd5bfdcc20
-
SHA1
6c65353faf17815857e0bb474681eb42c5291978
-
SHA256
37bf19531b49d2c47c2b4af16bc69850df0691e7dd4229a6a883193b50685ced
-
SHA512
2c18b9600ebd9fec54cd2f774cb2ebcec11a1c0030f233ddbe555e4378ee39c9025b9448bb2f550203abbc9d28e5513637409a3b7ce65cb33e38ce128bdb6cee
-
SSDEEP
3072:rkqoCl/YgjxEufVU0TbTyDDalbyCH99X5tpX2vz4eAILUr:rjLqdufVUNDar9JHX2vEI0
-
Modifies visiblity of hidden/system files in Explorer
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
-