Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
983fd27bec71b09f97d3b0d1317c025b4fec79f1e380e18cd9eb9b7d87439b71
-
Size
100KB
-
Sample
221205-p87e1acb26
-
MD5
0bd6e7c1a043bac16347db7e5bac1f25
-
SHA1
aaaa90e62303db969b375acf2aa45534f8b91fd3
-
SHA256
983fd27bec71b09f97d3b0d1317c025b4fec79f1e380e18cd9eb9b7d87439b71
-
SHA512
68524ca268796c6adb51cb8294c2067721647af4d0ac2d9212a8ddca387771e8f26972e006070449914f70e3031fe4cd9c97f533f185c1e0fca7711006c70835
-
SSDEEP
1536:/q20g5JIGpv3yuO/vAlR/4N1oi+d6f42WV7yZmjMkl2eC:C253x3jUGoA2WV+ERl2eC
Static task
static1
Behavioral task
behavioral1
Sample
983fd27bec71b09f97d3b0d1317c025b4fec79f1e380e18cd9eb9b7d87439b71.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
983fd27bec71b09f97d3b0d1317c025b4fec79f1e380e18cd9eb9b7d87439b71
-
Size
100KB
-
MD5
0bd6e7c1a043bac16347db7e5bac1f25
-
SHA1
aaaa90e62303db969b375acf2aa45534f8b91fd3
-
SHA256
983fd27bec71b09f97d3b0d1317c025b4fec79f1e380e18cd9eb9b7d87439b71
-
SHA512
68524ca268796c6adb51cb8294c2067721647af4d0ac2d9212a8ddca387771e8f26972e006070449914f70e3031fe4cd9c97f533f185c1e0fca7711006c70835
-
SSDEEP
1536:/q20g5JIGpv3yuO/vAlR/4N1oi+d6f42WV7yZmjMkl2eC:C253x3jUGoA2WV+ERl2eC
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-