Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
46e63debbe9d03715062a8a7b4a85c8ddb5d433801b5f9a4916e16abef149258
-
Size
920KB
-
Sample
230420-11hmfsce85
-
MD5
c4cf57c3d6c255b2c2c3c8532a3e77ce
-
SHA1
f4b978138a39c1ac21f8a61de9a9c5e2ba85c880
-
SHA256
46e63debbe9d03715062a8a7b4a85c8ddb5d433801b5f9a4916e16abef149258
-
SHA512
72d287e439971d419b10dbf01ac1fa169d2c1e10bc380cc204e01bd9bb3f5a753a1800146f726f61c22dc26822443d50b7d1a4ee56b35153c21c1b8932613f69
-
SSDEEP
24576:gyodB2as3mUPrbxnkf5qaXKLKLKTFmg53bvBXF+khofY:neB2Z3mkvxW7LGt3ef
Static task
static1
Malware Config
Targets
-
-
Target
46e63debbe9d03715062a8a7b4a85c8ddb5d433801b5f9a4916e16abef149258
-
Size
920KB
-
MD5
c4cf57c3d6c255b2c2c3c8532a3e77ce
-
SHA1
f4b978138a39c1ac21f8a61de9a9c5e2ba85c880
-
SHA256
46e63debbe9d03715062a8a7b4a85c8ddb5d433801b5f9a4916e16abef149258
-
SHA512
72d287e439971d419b10dbf01ac1fa169d2c1e10bc380cc204e01bd9bb3f5a753a1800146f726f61c22dc26822443d50b7d1a4ee56b35153c21c1b8932613f69
-
SSDEEP
24576:gyodB2as3mUPrbxnkf5qaXKLKLKTFmg53bvBXF+khofY:neB2Z3mkvxW7LGt3ef
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-