Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
54169fcef61d5f8676e7fdb99cb44f72193bfff9bcb39013b812336ea65affe8
-
Size
34KB
-
Sample
221127-m4tx1aca42
-
MD5
e0a6499e90251013599e2df6692a1eb1
-
SHA1
f830c68b554f44f3f75b5b1de53df72890c0bbb3
-
SHA256
54169fcef61d5f8676e7fdb99cb44f72193bfff9bcb39013b812336ea65affe8
-
SHA512
8aa81045f13787d6c7add184000c180f1c45cf5ec61ca3055a2da630bf4d1495fa07fabe398755653a84cc552c6cf7437313854b40792134d1ba642a66eaf9c1
-
SSDEEP
768:H7xHM+rCztHboqBakTHaoHPgyavi8fNljjV5XtpA1z:bxs8CztlIm6oHPpyfNlLrAt
Behavioral task
behavioral1
Sample
54169fcef61d5f8676e7fdb99cb44f72193bfff9bcb39013b812336ea65affe8.exe
Resource
win7-20220812-en
Malware Config
Extracted
pony
http://ivyrichfarmltd.com/Panel/gate.php
Targets
-
-
Target
54169fcef61d5f8676e7fdb99cb44f72193bfff9bcb39013b812336ea65affe8
-
Size
34KB
-
MD5
e0a6499e90251013599e2df6692a1eb1
-
SHA1
f830c68b554f44f3f75b5b1de53df72890c0bbb3
-
SHA256
54169fcef61d5f8676e7fdb99cb44f72193bfff9bcb39013b812336ea65affe8
-
SHA512
8aa81045f13787d6c7add184000c180f1c45cf5ec61ca3055a2da630bf4d1495fa07fabe398755653a84cc552c6cf7437313854b40792134d1ba642a66eaf9c1
-
SSDEEP
768:H7xHM+rCztHboqBakTHaoHPgyavi8fNljjV5XtpA1z:bxs8CztlIm6oHPpyfNlLrAt
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-