Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file.exe
-
Size
2.0MB
-
Sample
230206-pf13hshb3x
-
MD5
8b3ae71abae1162578a689b24d29731d
-
SHA1
cef1f372fd825155b8e3431250ccf6b412dd2c7d
-
SHA256
f8b2fdaf943ebf26cb5d3bad4764baa24829c851b41fdc644793afbebd6ea6c9
-
SHA512
1ab284f521f4d58af427670d2b340c24d84776ab7e2c25d4a1d7c112ef8ccd86a087a11e7aec7f64c0ba36295bba1e2d4241851a6c91cfaefddf6cad17d29056
-
SSDEEP
49152:nZhNBiPYk0ozFazALCQCYsuIXMEF19+DK3+/2LCgv2MR:ZhNwzFazvQCluIbUbmv2MR
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
file.exe
-
Size
2.0MB
-
MD5
8b3ae71abae1162578a689b24d29731d
-
SHA1
cef1f372fd825155b8e3431250ccf6b412dd2c7d
-
SHA256
f8b2fdaf943ebf26cb5d3bad4764baa24829c851b41fdc644793afbebd6ea6c9
-
SHA512
1ab284f521f4d58af427670d2b340c24d84776ab7e2c25d4a1d7c112ef8ccd86a087a11e7aec7f64c0ba36295bba1e2d4241851a6c91cfaefddf6cad17d29056
-
SSDEEP
49152:nZhNBiPYk0ozFazALCQCYsuIXMEF19+DK3+/2LCgv2MR:ZhNwzFazvQCluIbUbmv2MR
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-