Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1fea959d1482edc54e1794273a5f416d9c4847c12026e089ca85d1475e689c36
-
Size
937KB
-
Sample
230418-z8w95sgb9v
-
MD5
4c937e9f0c2dc5b26c92c17b79593f4e
-
SHA1
443028e7cca692cd1e158ee9669752c204f4bb63
-
SHA256
1fea959d1482edc54e1794273a5f416d9c4847c12026e089ca85d1475e689c36
-
SHA512
7aff88bf06e8683a1a6f89743303a71b47d68de1766b59d099926cc017a2d17e6571f49ce20ce38c5f5bfc0eee977ac40615dc97ec87e751cdb367c761377f4f
-
SSDEEP
24576:hyjeVkkmMXIvkdDpXfbxLtB/dwOA3Za+y6:U6VkkDXIyXfbxJB/dxsZxy
Static task
static1
Malware Config
Targets
-
-
Target
1fea959d1482edc54e1794273a5f416d9c4847c12026e089ca85d1475e689c36
-
Size
937KB
-
MD5
4c937e9f0c2dc5b26c92c17b79593f4e
-
SHA1
443028e7cca692cd1e158ee9669752c204f4bb63
-
SHA256
1fea959d1482edc54e1794273a5f416d9c4847c12026e089ca85d1475e689c36
-
SHA512
7aff88bf06e8683a1a6f89743303a71b47d68de1766b59d099926cc017a2d17e6571f49ce20ce38c5f5bfc0eee977ac40615dc97ec87e751cdb367c761377f4f
-
SSDEEP
24576:hyjeVkkmMXIvkdDpXfbxLtB/dwOA3Za+y6:U6VkkDXIyXfbxJB/dxsZxy
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-