Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
987145348116059ca96d7ad268fde2775e613b4da73499f0cff8683158a5c978
-
Size
828KB
-
Sample
230420-ek648ahd6x
-
MD5
2cdd9715f82bd8555df65d402aef2c5a
-
SHA1
e7665f403f3a3e1a228dad76ca0d91e477d39998
-
SHA256
987145348116059ca96d7ad268fde2775e613b4da73499f0cff8683158a5c978
-
SHA512
7fd1ba6ec3357fbad321c91851c03197a23fdb763654f6afdca727259962ada17ce4b593a129e6ffc9facaacc373b65b536eb41c88808678fdf01bc766a40713
-
SSDEEP
12288:1y905qoigyCysbphgywnJNYaTmemoET6tGAeDduW9N387wQIZ0yqgbf597ZSzn:1yeqtgFysbbVwn1TDMT3DduWrNZ+gon
Static task
static1
Malware Config
Targets
-
-
Target
987145348116059ca96d7ad268fde2775e613b4da73499f0cff8683158a5c978
-
Size
828KB
-
MD5
2cdd9715f82bd8555df65d402aef2c5a
-
SHA1
e7665f403f3a3e1a228dad76ca0d91e477d39998
-
SHA256
987145348116059ca96d7ad268fde2775e613b4da73499f0cff8683158a5c978
-
SHA512
7fd1ba6ec3357fbad321c91851c03197a23fdb763654f6afdca727259962ada17ce4b593a129e6ffc9facaacc373b65b536eb41c88808678fdf01bc766a40713
-
SSDEEP
12288:1y905qoigyCysbphgywnJNYaTmemoET6tGAeDduW9N387wQIZ0yqgbf597ZSzn:1yeqtgFysbbVwn1TDMT3DduWrNZ+gon
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-