Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
41494f40315e5e0bc18e36704e838068fbb9c1640473ef72a8562f0122c5214c
-
Size
945KB
-
Sample
230421-qpparafg42
-
MD5
2ff4202da54abdc6f75e3b349f87f4eb
-
SHA1
49e0fcdbc83c592f27d743e321b4098e1c0c6aa8
-
SHA256
41494f40315e5e0bc18e36704e838068fbb9c1640473ef72a8562f0122c5214c
-
SHA512
0352063b5e958727db144dd361eb94559c9e3d40e7dbc309c8556f4c66c735092c041aee02637f931f84e2d6d20cbbb4ddc84a7c20611037ae926d32d2162556
-
SSDEEP
12288:by90HOPntSSLunQKNAwn0vweYo/+ELJ/bvl56F2RqQYSrOsB3NE1c6ol2t:byuObL/lOeZ/+ENbvaYRq2rac6oC
Static task
static1
Malware Config
Targets
-
-
Target
41494f40315e5e0bc18e36704e838068fbb9c1640473ef72a8562f0122c5214c
-
Size
945KB
-
MD5
2ff4202da54abdc6f75e3b349f87f4eb
-
SHA1
49e0fcdbc83c592f27d743e321b4098e1c0c6aa8
-
SHA256
41494f40315e5e0bc18e36704e838068fbb9c1640473ef72a8562f0122c5214c
-
SHA512
0352063b5e958727db144dd361eb94559c9e3d40e7dbc309c8556f4c66c735092c041aee02637f931f84e2d6d20cbbb4ddc84a7c20611037ae926d32d2162556
-
SSDEEP
12288:by90HOPntSSLunQKNAwn0vweYo/+ELJ/bvl56F2RqQYSrOsB3NE1c6ol2t:byuObL/lOeZ/+ENbvaYRq2rac6oC
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-