Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
251002cd6ca52185f3d641d56fed6e380cc7d0d83968537725b99b881adffa5b
-
Size
170KB
-
Sample
221204-bya26aae2t
-
MD5
5fe558615880ab657c9e02bc05a83840
-
SHA1
1926d3a9faaa6173d211c8cb5d5a13d1181cf9af
-
SHA256
251002cd6ca52185f3d641d56fed6e380cc7d0d83968537725b99b881adffa5b
-
SHA512
20b91e51df743f06f501f6b5b813a1e72457b81e634c3684e2a137f9a4f02787427b07154e96f3f066d27ee6b59b07e16262434d14b9448cbbb0556d871ce674
-
SSDEEP
3072:k2vTIyAjtVTNaPAm51VEa8vS4v+Vn6cw8A1mrMpgY:TI1jPTNQ/Vl6S4v+Q8cmK
Behavioral task
behavioral1
Sample
251002cd6ca52185f3d641d56fed6e380cc7d0d83968537725b99b881adffa5b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
251002cd6ca52185f3d641d56fed6e380cc7d0d83968537725b99b881adffa5b.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
251002cd6ca52185f3d641d56fed6e380cc7d0d83968537725b99b881adffa5b
-
Size
170KB
-
MD5
5fe558615880ab657c9e02bc05a83840
-
SHA1
1926d3a9faaa6173d211c8cb5d5a13d1181cf9af
-
SHA256
251002cd6ca52185f3d641d56fed6e380cc7d0d83968537725b99b881adffa5b
-
SHA512
20b91e51df743f06f501f6b5b813a1e72457b81e634c3684e2a137f9a4f02787427b07154e96f3f066d27ee6b59b07e16262434d14b9448cbbb0556d871ce674
-
SSDEEP
3072:k2vTIyAjtVTNaPAm51VEa8vS4v+Vn6cw8A1mrMpgY:TI1jPTNQ/Vl6S4v+Q8cmK
-
Modifies WinLogon for persistence
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-