Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
84ef9e96e9d1fd9974f716044e3418ca392ef28c6e7b5af76dc4f410c3e25fa0
-
Size
156KB
-
Sample
221201-cc5kbadg85
-
MD5
c1e7b05d080ba7cb9b276f6accedbdee
-
SHA1
dbb6c844eb92133b9969c4866c82f6b8c55295dd
-
SHA256
84ef9e96e9d1fd9974f716044e3418ca392ef28c6e7b5af76dc4f410c3e25fa0
-
SHA512
e44edca6d488d0cc7b4dd90b7de027fb9fb921418877665f2841181dcc25fc70ca2285870d3a4cc408b47e3c0bd2488668ae48db37cd20b86ce8c2c4b2ff7182
-
SSDEEP
3072:KgD+RIISGnH7AR7DYZUpfJCEvqI9FU2b:KneI/bwyQhv
Static task
static1
Behavioral task
behavioral1
Sample
84ef9e96e9d1fd9974f716044e3418ca392ef28c6e7b5af76dc4f410c3e25fa0.exe
Resource
win7-20220901-en
Malware Config
Extracted
pony
http://209.59.219.1/forum/viewtopic.php
http://212.58.20.11/forum/viewtopic.php
-
payload_url
http://cumhuriyetciavukatlar.info/M5Mco.exe
http://thebeautiq.com.au/736XymQx.exe
http://207.204.20.213/Bd1.exe
Targets
-
-
Target
84ef9e96e9d1fd9974f716044e3418ca392ef28c6e7b5af76dc4f410c3e25fa0
-
Size
156KB
-
MD5
c1e7b05d080ba7cb9b276f6accedbdee
-
SHA1
dbb6c844eb92133b9969c4866c82f6b8c55295dd
-
SHA256
84ef9e96e9d1fd9974f716044e3418ca392ef28c6e7b5af76dc4f410c3e25fa0
-
SHA512
e44edca6d488d0cc7b4dd90b7de027fb9fb921418877665f2841181dcc25fc70ca2285870d3a4cc408b47e3c0bd2488668ae48db37cd20b86ce8c2c4b2ff7182
-
SSDEEP
3072:KgD+RIISGnH7AR7DYZUpfJCEvqI9FU2b:KneI/bwyQhv
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-