Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
11c87d4d95ee82271db156675efb1273f570b39556bef63ef1fdbf8279fa82d7
-
Size
944KB
-
Sample
230421-z1dstshh69
-
MD5
8c6abcff23fd0a3d9a254b790b7d8186
-
SHA1
dc8e88e4edaf0d0074fa4967e63aac47fd4be77f
-
SHA256
11c87d4d95ee82271db156675efb1273f570b39556bef63ef1fdbf8279fa82d7
-
SHA512
88dad7f78d105b33cf6e773dc83dc89c02c5bab50d45a3dce1f9d7c504bac64dd59c34e2ac2668fede871daa1da8341a7098bc31148d98569a7af320c6e5329c
-
SSDEEP
24576:ByU2DNbHzUKJWb5+HYfnX1GSh1HrssXVKNy:0bJbc+HaXMCssXVO
Static task
static1
Malware Config
Targets
-
-
Target
11c87d4d95ee82271db156675efb1273f570b39556bef63ef1fdbf8279fa82d7
-
Size
944KB
-
MD5
8c6abcff23fd0a3d9a254b790b7d8186
-
SHA1
dc8e88e4edaf0d0074fa4967e63aac47fd4be77f
-
SHA256
11c87d4d95ee82271db156675efb1273f570b39556bef63ef1fdbf8279fa82d7
-
SHA512
88dad7f78d105b33cf6e773dc83dc89c02c5bab50d45a3dce1f9d7c504bac64dd59c34e2ac2668fede871daa1da8341a7098bc31148d98569a7af320c6e5329c
-
SSDEEP
24576:ByU2DNbHzUKJWb5+HYfnX1GSh1HrssXVKNy:0bJbc+HaXMCssXVO
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-