Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file.exe
-
Size
1.9MB
-
Sample
230205-ghe9tsgd58
-
MD5
b769dbfd7aefc3790bb6e2ab6c262179
-
SHA1
611ca0d97a3531b3816fc3f2d704f3a94bb5ef63
-
SHA256
f1f0a52953babf6fd612d8c4834966a930d969f4925835808b242bdc643a2786
-
SHA512
be4d9814b45a231c0ee9e98dc47c1d740ee45b7d712517d5c479928c576b750dea08ba6c33e0087fe50e27b3975e6807e35f39dd856564df1a729f3e1ef95c8d
-
SSDEEP
49152:xa0VUFeJZPs1FiZ4kIIo5ZHrvbzJZvoFYBWyCmn2zGoJLCgv2MR:Q0IeJps1FiCqo5hv7OYpZ6v2MR
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
file.exe
-
Size
1.9MB
-
MD5
b769dbfd7aefc3790bb6e2ab6c262179
-
SHA1
611ca0d97a3531b3816fc3f2d704f3a94bb5ef63
-
SHA256
f1f0a52953babf6fd612d8c4834966a930d969f4925835808b242bdc643a2786
-
SHA512
be4d9814b45a231c0ee9e98dc47c1d740ee45b7d712517d5c479928c576b750dea08ba6c33e0087fe50e27b3975e6807e35f39dd856564df1a729f3e1ef95c8d
-
SSDEEP
49152:xa0VUFeJZPs1FiZ4kIIo5ZHrvbzJZvoFYBWyCmn2zGoJLCgv2MR:Q0IeJps1FiCqo5hv7OYpZ6v2MR
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-