Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
78bc9e6b8f54759b0e794f53ef3cdb1a.bin
-
Size
2.9MB
-
Sample
230215-bs29fshd58
-
MD5
adc001de063cc2955281b21d9f704f91
-
SHA1
80acca26a3646e3dd23d6d37689941facadadd16
-
SHA256
0acf38bc2948ee9e7e71af7c272e017a22a9feed7201f8656d72e6d6dc6674ac
-
SHA512
1f82109c67b09c54379273a53198f177208b80a68bf6b0f348e075a236773ad2eaa7716271f4ecd4e41bca6f1b76317caa3668ed50339b2285bdf21fc8f484d0
-
SSDEEP
49152:V7pZWnXlMWjCqWoFXftTdCMwr1JyjPWrayuTFrq1Sxk4+A48hm4vbT+Z:FyuWjCqBtTUMwr1YWrf202ttY4T+Z
Static task
static1
Behavioral task
behavioral1
Sample
027f5be3a4581f03ae89654c543504913f6d8e0cde4a8ccf9f10088097d2f8b1.exe
Resource
win7-20220812-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
027f5be3a4581f03ae89654c543504913f6d8e0cde4a8ccf9f10088097d2f8b1.exe
-
Size
3.2MB
-
MD5
78bc9e6b8f54759b0e794f53ef3cdb1a
-
SHA1
a09e556df5d1e0317d457d87ef6c890fdd565750
-
SHA256
027f5be3a4581f03ae89654c543504913f6d8e0cde4a8ccf9f10088097d2f8b1
-
SHA512
c6c0b9964de956ecf564aed4cb79312c348ae0a3627dffcc088812687fc283d2ba1985b14231a03299621ead4b80a352fcc758ed32ae35735a2d689a5d40c238
-
SSDEEP
98304:JH6lBpoF4mZmTiwxb/PCsFJa8nwlTvPyMZC9Iv2MR:d6l/oF406iwF/qsztwlbZC9IvjR
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-