Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
15767b9e41ee631007be134b6ed1a65b9cf1805e15a730ffa18f62efb88ba7fa
-
Size
770KB
-
Sample
221128-brb1wahf9v
-
MD5
30ac5cdbdd174e3debe2967669080398
-
SHA1
e0fcadb812d01fe5791b9a17414ea1d35c9e4e15
-
SHA256
15767b9e41ee631007be134b6ed1a65b9cf1805e15a730ffa18f62efb88ba7fa
-
SHA512
8bed779eebff6b0f1218f7b1fe4c9e2cf0ac8546146a3fc8545cf53c4b5568f41877e77fcc7535a4e00a677233495b1d167f176e65146dd5cf10d4aaca8ac0ed
-
SSDEEP
12288:hdP4gs4g8zMQtBgaJm8tspGtgsKZd2fKZd2EIAB0FIzuJuXtiabre:8SVG8P6swEwFFzMudia+
Static task
static1
Behavioral task
behavioral1
Sample
15767b9e41ee631007be134b6ed1a65b9cf1805e15a730ffa18f62efb88ba7fa.doc
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
15767b9e41ee631007be134b6ed1a65b9cf1805e15a730ffa18f62efb88ba7fa.doc
Resource
win10v2004-20221111-en
Malware Config
Extracted
pony
http://www.krossfight.eu/trustmebaby/gate.php
-
payload_url
http://optimization-methods.com/Bilder/calc.exe
Targets
-
-
Target
15767b9e41ee631007be134b6ed1a65b9cf1805e15a730ffa18f62efb88ba7fa
-
Size
770KB
-
MD5
30ac5cdbdd174e3debe2967669080398
-
SHA1
e0fcadb812d01fe5791b9a17414ea1d35c9e4e15
-
SHA256
15767b9e41ee631007be134b6ed1a65b9cf1805e15a730ffa18f62efb88ba7fa
-
SHA512
8bed779eebff6b0f1218f7b1fe4c9e2cf0ac8546146a3fc8545cf53c4b5568f41877e77fcc7535a4e00a677233495b1d167f176e65146dd5cf10d4aaca8ac0ed
-
SSDEEP
12288:hdP4gs4g8zMQtBgaJm8tspGtgsKZd2fKZd2EIAB0FIzuJuXtiabre:8SVG8P6swEwFFzMudia+
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-