Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
67d2e2970d531dbf72ef6a04aac3377da001f33e54daf2ff864b8d36f295a93b
-
Size
963KB
-
Sample
230420-a5xztsgd6y
-
MD5
314d3a69e5273260f14f5806b22ac0ed
-
SHA1
4917e8889d9d389d99aa9746b4ca3298b816669b
-
SHA256
67d2e2970d531dbf72ef6a04aac3377da001f33e54daf2ff864b8d36f295a93b
-
SHA512
ba9988c406ec8ac0d113c2b87b8d440d19a5a1c9398aef2a8feccf3524bfc0ba4e50aee14ad1f5277ff272ca8121e78d91930d754ba8e07462030e31fa10a3ce
-
SSDEEP
24576:VyTTtCKQuj+pJBJEkYcfCNZPyQWbXHGAFM8N0kW1g:wVCuCpJB6kYcf4rWDGsN0kW
Static task
static1
Malware Config
Targets
-
-
Target
67d2e2970d531dbf72ef6a04aac3377da001f33e54daf2ff864b8d36f295a93b
-
Size
963KB
-
MD5
314d3a69e5273260f14f5806b22ac0ed
-
SHA1
4917e8889d9d389d99aa9746b4ca3298b816669b
-
SHA256
67d2e2970d531dbf72ef6a04aac3377da001f33e54daf2ff864b8d36f295a93b
-
SHA512
ba9988c406ec8ac0d113c2b87b8d440d19a5a1c9398aef2a8feccf3524bfc0ba4e50aee14ad1f5277ff272ca8121e78d91930d754ba8e07462030e31fa10a3ce
-
SSDEEP
24576:VyTTtCKQuj+pJBJEkYcfCNZPyQWbXHGAFM8N0kW1g:wVCuCpJB6kYcf4rWDGsN0kW
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-