Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d9ef4ac90250f24cfd6f186cdd83f763af552bf928e0431cee74d6b1b328e493
-
Size
843KB
-
Sample
230417-nrczdsdh84
-
MD5
99d873e934ad978da41778deff3f71e8
-
SHA1
da99cf462e4a9170519b6be039c8cac70277ace4
-
SHA256
d9ef4ac90250f24cfd6f186cdd83f763af552bf928e0431cee74d6b1b328e493
-
SHA512
e0e273232ddcbe361aaca1b7b4b5353161ec2be2087b38750f1354f6fb1130050ecb165d692daa8d1465c05b8f92ab419725558bf2d31db3a49e8657974540b3
-
SSDEEP
24576:6yMM/CekTHGiRthXiMK74wozypBvQlgc:BMu2Sd74bIBb
Static task
static1
Malware Config
Targets
-
-
Target
d9ef4ac90250f24cfd6f186cdd83f763af552bf928e0431cee74d6b1b328e493
-
Size
843KB
-
MD5
99d873e934ad978da41778deff3f71e8
-
SHA1
da99cf462e4a9170519b6be039c8cac70277ace4
-
SHA256
d9ef4ac90250f24cfd6f186cdd83f763af552bf928e0431cee74d6b1b328e493
-
SHA512
e0e273232ddcbe361aaca1b7b4b5353161ec2be2087b38750f1354f6fb1130050ecb165d692daa8d1465c05b8f92ab419725558bf2d31db3a49e8657974540b3
-
SSDEEP
24576:6yMM/CekTHGiRthXiMK74wozypBvQlgc:BMu2Sd74bIBb
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-