Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
379a56c959780c05f5c72d2a6b9c38b3e2fdb4b4c44538594562df46d318d839
-
Size
828KB
-
Sample
230419-jzjppaba8v
-
MD5
205a6c816df988e2ddfcfa11ed0876cc
-
SHA1
3da1645b600cef6916c56d776805be2e387d7ba8
-
SHA256
379a56c959780c05f5c72d2a6b9c38b3e2fdb4b4c44538594562df46d318d839
-
SHA512
6470ac384e513ce2e3fd46142b1a9d6ef26d6c58eb89a8c87222a64a77f3c69d9981446da4c58e6b9cd09fe0cf2fcbae511d885c6610bd78d8134b063fd65597
-
SSDEEP
12288:ey90GQs1Do701lFSMvw1FP1y7FOJBNQIwWrwPgcCokiRtyopR68PsJ998Fxa:eyrYSFSQwEhgBNhw3fppVPiX8FA
Static task
static1
Malware Config
Targets
-
-
Target
379a56c959780c05f5c72d2a6b9c38b3e2fdb4b4c44538594562df46d318d839
-
Size
828KB
-
MD5
205a6c816df988e2ddfcfa11ed0876cc
-
SHA1
3da1645b600cef6916c56d776805be2e387d7ba8
-
SHA256
379a56c959780c05f5c72d2a6b9c38b3e2fdb4b4c44538594562df46d318d839
-
SHA512
6470ac384e513ce2e3fd46142b1a9d6ef26d6c58eb89a8c87222a64a77f3c69d9981446da4c58e6b9cd09fe0cf2fcbae511d885c6610bd78d8134b063fd65597
-
SSDEEP
12288:ey90GQs1Do701lFSMvw1FP1y7FOJBNQIwWrwPgcCokiRtyopR68PsJ998Fxa:eyrYSFSQwEhgBNhw3fppVPiX8FA
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-