Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file.exe
-
Size
2.2MB
-
Sample
221127-kpajpsha2v
-
MD5
996d4d9b027151e10c0237347970ca6a
-
SHA1
413736534be3072bcc96ab3e40395e6717ab78c5
-
SHA256
00c218abf9a06151b0fe57b8253c20d79d621ae25b4d78558866004b46458186
-
SHA512
6c0a6fcf52929dc99df1578dfcd1de91ef7a9700afdde7226db6e09903f831fdd765a11d3157eb65407424a48bbb99109bf9fe4a2bafc0db3d6533c3db10f424
-
SSDEEP
49152:ITNygzuAlyJfUJxMafII8Pm6rqVQNOw74slEcw5AG5cyT:ITsLAlNka1xC37ZacyXcyT
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
2.2MB
-
MD5
996d4d9b027151e10c0237347970ca6a
-
SHA1
413736534be3072bcc96ab3e40395e6717ab78c5
-
SHA256
00c218abf9a06151b0fe57b8253c20d79d621ae25b4d78558866004b46458186
-
SHA512
6c0a6fcf52929dc99df1578dfcd1de91ef7a9700afdde7226db6e09903f831fdd765a11d3157eb65407424a48bbb99109bf9fe4a2bafc0db3d6533c3db10f424
-
SSDEEP
49152:ITNygzuAlyJfUJxMafII8Pm6rqVQNOw74slEcw5AG5cyT:ITsLAlNka1xC37ZacyXcyT
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-