Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
7fae69824ad72fb14531e265392862a9c709a26ca8b1c512b57a4e7e4ffb27a6
-
Size
120KB
-
Sample
221203-kbkgragf86
-
MD5
4c2d57c66fed8326773184f02bb28acb
-
SHA1
66f1abc5a4c44d3db313fb925361f3bfa6a68991
-
SHA256
7fae69824ad72fb14531e265392862a9c709a26ca8b1c512b57a4e7e4ffb27a6
-
SHA512
c2ba7afa77bda3c322c6c184e53721f41d8e23bd0799a22d0484355c33eabf7d5ac0d5f07a87e474fd653736224d889aa02540c97b2a49c9f64962062679d5bd
-
SSDEEP
1536:ClQVp4hnLydTzNm4F0atSl97dWMrnF3+YbSzp5Vp78WUJDUBEu:gI0nLYNm4FtmnoBNDGlJwEu
Static task
static1
Behavioral task
behavioral1
Sample
7fae69824ad72fb14531e265392862a9c709a26ca8b1c512b57a4e7e4ffb27a6.dll
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
7fae69824ad72fb14531e265392862a9c709a26ca8b1c512b57a4e7e4ffb27a6
-
Size
120KB
-
MD5
4c2d57c66fed8326773184f02bb28acb
-
SHA1
66f1abc5a4c44d3db313fb925361f3bfa6a68991
-
SHA256
7fae69824ad72fb14531e265392862a9c709a26ca8b1c512b57a4e7e4ffb27a6
-
SHA512
c2ba7afa77bda3c322c6c184e53721f41d8e23bd0799a22d0484355c33eabf7d5ac0d5f07a87e474fd653736224d889aa02540c97b2a49c9f64962062679d5bd
-
SSDEEP
1536:ClQVp4hnLydTzNm4F0atSl97dWMrnF3+YbSzp5Vp78WUJDUBEu:gI0nLYNm4FtmnoBNDGlJwEu
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-