Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b0dfa0278be0ec49b450ade4659a79aa43d84b749991ec769ad51fb5586a14f7
-
Size
111KB
-
Sample
221207-ehm9bsfd8t
-
MD5
532d06766dab06da461e15a7605a970f
-
SHA1
bfa8d4cbb5fe4f6327ca31d849c228a410d01a49
-
SHA256
b0dfa0278be0ec49b450ade4659a79aa43d84b749991ec769ad51fb5586a14f7
-
SHA512
acda1139c9921f5a5318fe0a030bb46f2eb05bb11eb25089ab70ad5377d99bdcd0fc8b4491728c8fda906993da1e93b18fbd0cb1c1ec858af822706868dd583f
-
SSDEEP
3072:/iwcU8Cijs0jwogJAZkX2Q8S6NqlkZ/ub:lcU8sUwog+ZkX2QxqVg
Static task
static1
Behavioral task
behavioral1
Sample
b0dfa0278be0ec49b450ade4659a79aa43d84b749991ec769ad51fb5586a14f7.exe
Resource
win7-20220901-en
Malware Config
Extracted
pony
http://setandforgetwebsites.net/forum/viewtopic.php
http://smallproductphotos.com/forum/viewtopic.php
http://timetoeatout.com/forum/viewtopic.php
http://mypersonalpathtopregnancy.com/forum/viewtopic.php
-
payload_url
http://72.32.63.133/1f3Hi8r.exe
http://derricoassociati.it/rjrtYyw5.exe
http://9ain.net/easm1.exe
http://goldgreece.com/x7fW.exe
Targets
-
-
Target
b0dfa0278be0ec49b450ade4659a79aa43d84b749991ec769ad51fb5586a14f7
-
Size
111KB
-
MD5
532d06766dab06da461e15a7605a970f
-
SHA1
bfa8d4cbb5fe4f6327ca31d849c228a410d01a49
-
SHA256
b0dfa0278be0ec49b450ade4659a79aa43d84b749991ec769ad51fb5586a14f7
-
SHA512
acda1139c9921f5a5318fe0a030bb46f2eb05bb11eb25089ab70ad5377d99bdcd0fc8b4491728c8fda906993da1e93b18fbd0cb1c1ec858af822706868dd583f
-
SSDEEP
3072:/iwcU8Cijs0jwogJAZkX2Q8S6NqlkZ/ub:lcU8sUwog+ZkX2QxqVg
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-