Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a723ea04978c40eea060ffbb4125db7c92779161944dd5b0b621846a563a3293
-
Size
1.1MB
-
Sample
230418-hkx34aaa88
-
MD5
dd319ff9fa07e99c92c469984aa3481a
-
SHA1
f4656a43ee4c93f6c883a9a8d08fd09ae1bb9dc7
-
SHA256
a723ea04978c40eea060ffbb4125db7c92779161944dd5b0b621846a563a3293
-
SHA512
4dffb5292923a018831f8f5a8815210c2952b6f679f27a0d8005a3877638835bdb7f648605d06e2bd2b388e366a1ab7a15557d402e67544d1a56614e17836f76
-
SSDEEP
24576:XydK32ToZ7h/C+MVoxjfm1JFTVjC2CWvafvz5b:iI32T87hfMSxfwJlJCNWi
Static task
static1
Malware Config
Targets
-
-
Target
a723ea04978c40eea060ffbb4125db7c92779161944dd5b0b621846a563a3293
-
Size
1.1MB
-
MD5
dd319ff9fa07e99c92c469984aa3481a
-
SHA1
f4656a43ee4c93f6c883a9a8d08fd09ae1bb9dc7
-
SHA256
a723ea04978c40eea060ffbb4125db7c92779161944dd5b0b621846a563a3293
-
SHA512
4dffb5292923a018831f8f5a8815210c2952b6f679f27a0d8005a3877638835bdb7f648605d06e2bd2b388e366a1ab7a15557d402e67544d1a56614e17836f76
-
SSDEEP
24576:XydK32ToZ7h/C+MVoxjfm1JFTVjC2CWvafvz5b:iI32T87hfMSxfwJlJCNWi
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-