Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file
-
Size
1.9MB
-
Sample
230205-1cwjeaec8y
-
MD5
31d7b9ee5d18a9c92b26e1f2353baa74
-
SHA1
9f4d629accc7ac4734c5390371203840e5df2271
-
SHA256
141d72e379f427e6305cb8a68918c4772d13976431efeca0500620800298e0a2
-
SHA512
d32c00ebeba39687cbbec78b4ff268b865b87534844e6a1eb4adafd10063642434df1274137949b7910171d450028607b0ca2fa2db75bff78be31aef6ea1da4b
-
SSDEEP
49152:xa5Vwntc/MpTm6d/RZCq2f7uKfKafViLCgv2MR:Q5Wi/MpTd5Zj2fWaNKv2MR
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
file
-
Size
1.9MB
-
MD5
31d7b9ee5d18a9c92b26e1f2353baa74
-
SHA1
9f4d629accc7ac4734c5390371203840e5df2271
-
SHA256
141d72e379f427e6305cb8a68918c4772d13976431efeca0500620800298e0a2
-
SHA512
d32c00ebeba39687cbbec78b4ff268b865b87534844e6a1eb4adafd10063642434df1274137949b7910171d450028607b0ca2fa2db75bff78be31aef6ea1da4b
-
SSDEEP
49152:xa5Vwntc/MpTm6d/RZCq2f7uKfKafViLCgv2MR:Q5Wi/MpTd5Zj2fWaNKv2MR
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-