Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f0d8ba79878f064308d7c32645a850310bbed2f123d99f4d6bf2ae3f0c3098de
-
Size
100KB
-
Sample
221203-nvz84aga22
-
MD5
dbb97edd4cf5730c20be42b38b1f797b
-
SHA1
9af64105b1220dd51ac39cafbf6be0ebba8d6b35
-
SHA256
f0d8ba79878f064308d7c32645a850310bbed2f123d99f4d6bf2ae3f0c3098de
-
SHA512
046dc65dbda912d48dc9501a106ab0943bfc5dc5ab2981e79c9f4fbacf0abb097306e7758554cbc90eaef96cc1ef1e141a499819b08055abd054704fa0cf67d5
-
SSDEEP
1536:sK2vUuCBZOit6Y0nPahTyJibk2endpq8AU8+8MN1J1+rINMrCfYn35PvW:X2vUuktiis0bk2eGzU8+vCINM0gPv
Static task
static1
Behavioral task
behavioral1
Sample
f0d8ba79878f064308d7c32645a850310bbed2f123d99f4d6bf2ae3f0c3098de.exe
Resource
win7-20220901-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
f0d8ba79878f064308d7c32645a850310bbed2f123d99f4d6bf2ae3f0c3098de
-
Size
100KB
-
MD5
dbb97edd4cf5730c20be42b38b1f797b
-
SHA1
9af64105b1220dd51ac39cafbf6be0ebba8d6b35
-
SHA256
f0d8ba79878f064308d7c32645a850310bbed2f123d99f4d6bf2ae3f0c3098de
-
SHA512
046dc65dbda912d48dc9501a106ab0943bfc5dc5ab2981e79c9f4fbacf0abb097306e7758554cbc90eaef96cc1ef1e141a499819b08055abd054704fa0cf67d5
-
SSDEEP
1536:sK2vUuCBZOit6Y0nPahTyJibk2endpq8AU8+8MN1J1+rINMrCfYn35PvW:X2vUuktiis0bk2eGzU8+vCINM0gPv
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-