Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d9432f096c58b8a0a36f27dfd0694df3cda62c1aee4fc791546d28bb531289ae
-
Size
238KB
-
Sample
221106-tf4wmaada8
-
MD5
0df275014b644f383e9549efccb52770
-
SHA1
258d48a71da29bd26cdc7af7c4b24f633041d6c6
-
SHA256
d9432f096c58b8a0a36f27dfd0694df3cda62c1aee4fc791546d28bb531289ae
-
SHA512
a56fb408cb775e35f38e1e6648d5be823efaf3375ac876979067d7b4492addea5db887c6fbc55494eee715e7ab12b65f71f08eca6aabcf97176c298164829074
-
SSDEEP
3072:InnAQVG/LytaKItS/fiLKS+f5Aq7iOmO0htrNn5a938J/TWcx2Jijq+wPIEryvy:EOTeHI8HiL7+f5D8J5WAqIOZPnx
Static task
static1
Behavioral task
behavioral1
Sample
d9432f096c58b8a0a36f27dfd0694df3cda62c1aee4fc791546d28bb531289ae.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
http://klkjwre77638dfqwieuoi888.info/
Targets
-
-
Target
d9432f096c58b8a0a36f27dfd0694df3cda62c1aee4fc791546d28bb531289ae
-
Size
238KB
-
MD5
0df275014b644f383e9549efccb52770
-
SHA1
258d48a71da29bd26cdc7af7c4b24f633041d6c6
-
SHA256
d9432f096c58b8a0a36f27dfd0694df3cda62c1aee4fc791546d28bb531289ae
-
SHA512
a56fb408cb775e35f38e1e6648d5be823efaf3375ac876979067d7b4492addea5db887c6fbc55494eee715e7ab12b65f71f08eca6aabcf97176c298164829074
-
SSDEEP
3072:InnAQVG/LytaKItS/fiLKS+f5Aq7iOmO0htrNn5a938J/TWcx2Jijq+wPIEryvy:EOTeHI8HiL7+f5D8J5WAqIOZPnx
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Loads dropped DLL
-