Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file.exe
-
Size
2.1MB
-
Sample
230130-w6ltvabe84
-
MD5
7423181d76c3421b19ac44bc6ff2ddc8
-
SHA1
dfddeafb935c0456574b7e3eb8cd71191e310059
-
SHA256
e29be6c64cea84981efd6f6a08d8a8ce2402a7c4df4ea77302a014717b1a84fd
-
SHA512
f81b10a399ebf260808af2951f89c6b1e46b058fbd91cf8a9d46186c490b6fd4a046b4ded2a1648e67f22acc624980d9aad57a6340d22d806ae596afcaac3467
-
SSDEEP
49152:2cL3W8IxyAGv7Tn9/DcbXxILgDpatoDhDStGSuOk4W7glpw9su9aLCgv2MR:Dzcmob45toDp33Ok87w2kyv2MR
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
file.exe
-
Size
2.1MB
-
MD5
7423181d76c3421b19ac44bc6ff2ddc8
-
SHA1
dfddeafb935c0456574b7e3eb8cd71191e310059
-
SHA256
e29be6c64cea84981efd6f6a08d8a8ce2402a7c4df4ea77302a014717b1a84fd
-
SHA512
f81b10a399ebf260808af2951f89c6b1e46b058fbd91cf8a9d46186c490b6fd4a046b4ded2a1648e67f22acc624980d9aad57a6340d22d806ae596afcaac3467
-
SSDEEP
49152:2cL3W8IxyAGv7Tn9/DcbXxILgDpatoDhDStGSuOk4W7glpw9su9aLCgv2MR:Dzcmob45toDp33Ok87w2kyv2MR
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-