Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ad4167dd02f88576539c7b6e5fa544ab0814396b6f0d1d94d639d7dc8d981188
-
Size
334KB
-
Sample
221128-etsm7adh46
-
MD5
3074e336bbabbb8765cbf4be9dcde233
-
SHA1
92aaf44e41cd553f257564191e0c07f273799c0a
-
SHA256
ad4167dd02f88576539c7b6e5fa544ab0814396b6f0d1d94d639d7dc8d981188
-
SHA512
706b58a72381cdfff30aaf25cbd9fccd25965c74d8565b42a189c53e4f0a877213fdbb39efe3207a811dbe5d8743459a603fe272705f8ecadc0da3277b5f6712
-
SSDEEP
6144:m6EzsH/w4qOUazCMcyq2WWZ4voYHpd8OgajXddulUn+JUTbKNGse:9rw4oaS4qQ2zrv/n+iTUfe
Static task
static1
Behavioral task
behavioral1
Sample
ad4167dd02f88576539c7b6e5fa544ab0814396b6f0d1d94d639d7dc8d981188.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad4167dd02f88576539c7b6e5fa544ab0814396b6f0d1d94d639d7dc8d981188.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
C:\$Recycle.Bin\S-1-5-21-3845472200-3839195424-595303356-1000\how_recover+qut.txt
http://jf73ndna34df.ceorldess.com/62A24A237B35519
http://fqa4dnfh5fsk4.tarsfee.com/62A24A237B35519
http://hrdsjrnvskdjnt.pay4softrn.com/62A24A237B35519
https://t7r67vsrpjcm5dfc.onion.to/62A24A237B35519
https://t7r67vsrpjcm5dfc.tor2web.org/62A24A237B35519
https://t7r67vsrpjcm5dfc.onion.cab/62A24A237B35519
http://t7r67vsrpjcm5dfc.onion/62A24A237B35519
Targets
-
-
Target
ad4167dd02f88576539c7b6e5fa544ab0814396b6f0d1d94d639d7dc8d981188
-
Size
334KB
-
MD5
3074e336bbabbb8765cbf4be9dcde233
-
SHA1
92aaf44e41cd553f257564191e0c07f273799c0a
-
SHA256
ad4167dd02f88576539c7b6e5fa544ab0814396b6f0d1d94d639d7dc8d981188
-
SHA512
706b58a72381cdfff30aaf25cbd9fccd25965c74d8565b42a189c53e4f0a877213fdbb39efe3207a811dbe5d8743459a603fe272705f8ecadc0da3277b5f6712
-
SSDEEP
6144:m6EzsH/w4qOUazCMcyq2WWZ4voYHpd8OgajXddulUn+JUTbKNGse:9rw4oaS4qQ2zrv/n+iTUfe
Score10/10-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-