Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ec170219dd0b3acf21756d497fc6024620cbaa83534be938bcff3b92cc68ffb7
-
Size
963KB
-
Sample
230419-shq7wadb51
-
MD5
2066db0c476de67a0197af17d8b1938e
-
SHA1
8afff614516e70c426fbf4aeefa8bd5c155c1406
-
SHA256
ec170219dd0b3acf21756d497fc6024620cbaa83534be938bcff3b92cc68ffb7
-
SHA512
6e544f3d29393376ad46873b9a566a6b0c735a1f176529e95f4f20b58c32f726579cb05f02469c8251ff1cf1917a59f9913cbc3abdc90f9460e482409fffdd01
-
SSDEEP
24576:1y3eZmB2AzmElmo7UQRzlv9mXqMJg4t0seYUp+qml:Q3JYASEL7jljAqMJJeJ+
Static task
static1
Malware Config
Targets
-
-
Target
ec170219dd0b3acf21756d497fc6024620cbaa83534be938bcff3b92cc68ffb7
-
Size
963KB
-
MD5
2066db0c476de67a0197af17d8b1938e
-
SHA1
8afff614516e70c426fbf4aeefa8bd5c155c1406
-
SHA256
ec170219dd0b3acf21756d497fc6024620cbaa83534be938bcff3b92cc68ffb7
-
SHA512
6e544f3d29393376ad46873b9a566a6b0c735a1f176529e95f4f20b58c32f726579cb05f02469c8251ff1cf1917a59f9913cbc3abdc90f9460e482409fffdd01
-
SSDEEP
24576:1y3eZmB2AzmElmo7UQRzlv9mXqMJg4t0seYUp+qml:Q3JYASEL7jljAqMJJeJ+
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-