Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
666660390faf67304b3b93ad05a2b410dcc7fc08cb92743af310bbeb078e26b6
-
Size
939KB
-
Sample
230419-d8cpvaga77
-
MD5
7e44b22ad83d9899bb670ac06bf8d45a
-
SHA1
0d6d15cfe42779856ffd77612e8b8cf5fd1bcb5f
-
SHA256
666660390faf67304b3b93ad05a2b410dcc7fc08cb92743af310bbeb078e26b6
-
SHA512
c60a4799b8478b6126201e4eda402405300b8689914eb26c6c609ea797f4aed61920d348216cddee1601cabad45129805ab446fb9fa896cc926366711ba5b984
-
SSDEEP
24576:Ny3go8jsfVCVxGkpzyjA3gEO55vrl34At1YgLW:o3gtokxfv3gLvrl3zbL
Static task
static1
Malware Config
Targets
-
-
Target
666660390faf67304b3b93ad05a2b410dcc7fc08cb92743af310bbeb078e26b6
-
Size
939KB
-
MD5
7e44b22ad83d9899bb670ac06bf8d45a
-
SHA1
0d6d15cfe42779856ffd77612e8b8cf5fd1bcb5f
-
SHA256
666660390faf67304b3b93ad05a2b410dcc7fc08cb92743af310bbeb078e26b6
-
SHA512
c60a4799b8478b6126201e4eda402405300b8689914eb26c6c609ea797f4aed61920d348216cddee1601cabad45129805ab446fb9fa896cc926366711ba5b984
-
SSDEEP
24576:Ny3go8jsfVCVxGkpzyjA3gEO55vrl34At1YgLW:o3gtokxfv3gLvrl3zbL
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-