Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
8aab6d990502a683d9020242e673dd208d433ecb517820e8072f69eed10770ab
-
Size
952KB
-
Sample
230417-dh9xnach28
-
MD5
7a972a3e20392f7c43b2753b94f51e98
-
SHA1
82d6d218718b08187033dfeb3bbd10543d0cda80
-
SHA256
8aab6d990502a683d9020242e673dd208d433ecb517820e8072f69eed10770ab
-
SHA512
752c46ae3914e840d1c9105665ee93f828351aa939765d067ba6a85ed15814190841d7f824b8beabc550f504f9507e39b59d35ccbb69ecc48d59d29242f25cce
-
SSDEEP
24576:gyTUlaXGbBC4zZ5yCC50QnwkVz13Xby4pfeSjgnW4:nQlaWbBCqDyCmnVz13WY
Static task
static1
Malware Config
Targets
-
-
Target
8aab6d990502a683d9020242e673dd208d433ecb517820e8072f69eed10770ab
-
Size
952KB
-
MD5
7a972a3e20392f7c43b2753b94f51e98
-
SHA1
82d6d218718b08187033dfeb3bbd10543d0cda80
-
SHA256
8aab6d990502a683d9020242e673dd208d433ecb517820e8072f69eed10770ab
-
SHA512
752c46ae3914e840d1c9105665ee93f828351aa939765d067ba6a85ed15814190841d7f824b8beabc550f504f9507e39b59d35ccbb69ecc48d59d29242f25cce
-
SSDEEP
24576:gyTUlaXGbBC4zZ5yCC50QnwkVz13Xby4pfeSjgnW4:nQlaWbBCqDyCmnVz13WY
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-