Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0c3c723010bd5ce148e3c457537aff637d02178c98a1d6fc8d1a365b73259749
-
Size
323KB
-
Sample
221202-xqmxmsea67
-
MD5
021d49557eb69af4d4da342ccc554c60
-
SHA1
36ed422ab465e2dcb58292190aa2841674329a9d
-
SHA256
0c3c723010bd5ce148e3c457537aff637d02178c98a1d6fc8d1a365b73259749
-
SHA512
11180415adb7b9783d520e9e02b46218def771f7a8da7ffc6fd600e52a99d05467524f3daa05746551413dbd31cb794ff9a8dcaee3da41e1391556c69048ba83
-
SSDEEP
384:SvBXBzuZ7n7P3A/Vaj2l8REChWEbHEDduRgPGQW9R5chw9jzMVVVg48orXjP:sxuV7PwFl8SCQ+kDduRgP/hw9EAeXj
Static task
static1
Behavioral task
behavioral1
Sample
0c3c723010bd5ce148e3c457537aff637d02178c98a1d6fc8d1a365b73259749.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
0c3c723010bd5ce148e3c457537aff637d02178c98a1d6fc8d1a365b73259749
-
Size
323KB
-
MD5
021d49557eb69af4d4da342ccc554c60
-
SHA1
36ed422ab465e2dcb58292190aa2841674329a9d
-
SHA256
0c3c723010bd5ce148e3c457537aff637d02178c98a1d6fc8d1a365b73259749
-
SHA512
11180415adb7b9783d520e9e02b46218def771f7a8da7ffc6fd600e52a99d05467524f3daa05746551413dbd31cb794ff9a8dcaee3da41e1391556c69048ba83
-
SSDEEP
384:SvBXBzuZ7n7P3A/Vaj2l8REChWEbHEDduRgPGQW9R5chw9jzMVVVg48orXjP:sxuV7PwFl8SCQ+kDduRgP/hw9EAeXj
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-