Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
547fe86a840917a2fde70774e1fa8a2610581b42206474303231ded2f4179848
-
Size
460KB
-
Sample
221127-2a9hxsgh2y
-
MD5
42ea65ffc61947188cdb79cd9c0daf69
-
SHA1
6de811d563fb014b847319e525f0abb2b33e1691
-
SHA256
547fe86a840917a2fde70774e1fa8a2610581b42206474303231ded2f4179848
-
SHA512
f92e902eff76b4b2f46d278f8b0a1eb41d9beec6fcb010b8a1bf2c1269de9e0fcb8ae9d027a18e457eeca47079469022b842207934a952bde0fadfa83408e1c1
-
SSDEEP
12288:+sAw9HD4XRhlitra71HPVzRZvZlk7Mb3c/M7aYz3SaQOEXsasmgQBoVR/uZ:DuvlitqptRbB
Static task
static1
Behavioral task
behavioral1
Sample
547fe86a840917a2fde70774e1fa8a2610581b42206474303231ded2f4179848.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
547fe86a840917a2fde70774e1fa8a2610581b42206474303231ded2f4179848.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
547fe86a840917a2fde70774e1fa8a2610581b42206474303231ded2f4179848
-
Size
460KB
-
MD5
42ea65ffc61947188cdb79cd9c0daf69
-
SHA1
6de811d563fb014b847319e525f0abb2b33e1691
-
SHA256
547fe86a840917a2fde70774e1fa8a2610581b42206474303231ded2f4179848
-
SHA512
f92e902eff76b4b2f46d278f8b0a1eb41d9beec6fcb010b8a1bf2c1269de9e0fcb8ae9d027a18e457eeca47079469022b842207934a952bde0fadfa83408e1c1
-
SSDEEP
12288:+sAw9HD4XRhlitra71HPVzRZvZlk7Mb3c/M7aYz3SaQOEXsasmgQBoVR/uZ:DuvlitqptRbB
Score8/10-
Executes dropped EXE
-
Deletes itself
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Drops file in System32 directory
-