Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file.exe
-
Size
2.7MB
-
Sample
221107-ggvywsddfm
-
MD5
dc0c966d39b5a65d7486be5b965e1ecf
-
SHA1
2f1f9fe78c20109b2b489829da9c295df56c0b7c
-
SHA256
50a0af15bb8891e45e3836ec3d3bd057745dfc9a483dca3bee8235fde518f8fb
-
SHA512
b503d8fb76bbf92b99c0a9b92f135be7cbdb39e38ccc221e48e29bf6afa046dd9629ceb8b3a13598a6bcf64029d6dcf1b696dff86987f91502a8c8a873e8ce7b
-
SSDEEP
49152:Z2nz+UHQyIb9WIZ05CnZH0bCt4kAc439rnUUdbHmsM1rDgCZ7PpxRc5A5hq:MLKbd0AnZuCt4kv41nFb+SwRzDq
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
2.7MB
-
MD5
dc0c966d39b5a65d7486be5b965e1ecf
-
SHA1
2f1f9fe78c20109b2b489829da9c295df56c0b7c
-
SHA256
50a0af15bb8891e45e3836ec3d3bd057745dfc9a483dca3bee8235fde518f8fb
-
SHA512
b503d8fb76bbf92b99c0a9b92f135be7cbdb39e38ccc221e48e29bf6afa046dd9629ceb8b3a13598a6bcf64029d6dcf1b696dff86987f91502a8c8a873e8ce7b
-
SSDEEP
49152:Z2nz+UHQyIb9WIZ05CnZH0bCt4kAc439rnUUdbHmsM1rDgCZ7PpxRc5A5hq:MLKbd0AnZuCt4kv41nFb+SwRzDq
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-