Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a6ab04cca14aece0c6368c194baf661c.bin
-
Size
2.0MB
-
Sample
230206-l1xn2sdc98
-
MD5
754b488c4f25a70f5a206adf1383ab2a
-
SHA1
9276d7c267dee6d5ece3ed25cf0c3ac75d220b5f
-
SHA256
dda824165a0edeb816599eff41e2f7a7f39398f960bf0a4ccc67836f45bf30eb
-
SHA512
1f7b6675db253d0018a3a98d695f8beb64308d6e77a7e8edd432577b40f87a5d9635bebdab84d7e9e61990f6e4579a43e6d1ccda7ba16b288e12dba93eac0e5f
-
SSDEEP
49152:uvCKj6xl4MWOQgkCaPVBOv+SkyRbxpoSBndhgf6Yhxm:9W6D47OeHVSHNpZndhgf3hxm
Static task
static1
Behavioral task
behavioral1
Sample
ef53963afa99e4a61f7978e66cd6343895bb6c4a5368a94b7d9fe6ad67e4eb96.exe
Resource
win7-20221111-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
ef53963afa99e4a61f7978e66cd6343895bb6c4a5368a94b7d9fe6ad67e4eb96.exe
-
Size
2.0MB
-
MD5
a6ab04cca14aece0c6368c194baf661c
-
SHA1
d8acca325c59bab0eb26373611723d32d91c2485
-
SHA256
ef53963afa99e4a61f7978e66cd6343895bb6c4a5368a94b7d9fe6ad67e4eb96
-
SHA512
3f2e7c030c1380ff53bc7fc8da47bece23ac0e846e862bc21bca475a8818881dfad1d2fae2e47c9a76c24e384bb36f7b24b7152c2e1956e727d455b1682a9db5
-
SSDEEP
49152:bgw2aVxkJpmcT7a59MJ1SSuwDnxeN+wKcGodhp3r/8AlRNELCgv2MR:cr7JpmcT51SiSK+3r8gQv2MR
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-