Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b1f80b04b8d9fb69f7ba06d4759a669aa5617f2a6cc4175641c40cdf981df819
-
Size
830KB
-
Sample
230422-aalnbaba24
-
MD5
30b05fcbcd23896e795468eda9b40ad6
-
SHA1
c87b299142fe60f8300637ffe1f19ecdf0b27dd0
-
SHA256
b1f80b04b8d9fb69f7ba06d4759a669aa5617f2a6cc4175641c40cdf981df819
-
SHA512
b6b4fc160f6623ec44d8c41befd9e023119814528bee11d1e4f112d27ebe5a875f972075de0f0c47e403b36be22cfc21a0214c57a7088ce0067ea8044233a061
-
SSDEEP
12288:9y90vvAl22LIX80GmTistfg/hOr2iYpOR4BxB3oUeslyt6KcvdZ4Y6:9yYvC22IMg4/oYpy4/B95ygKcvdZ4Y6
Static task
static1
Malware Config
Targets
-
-
Target
b1f80b04b8d9fb69f7ba06d4759a669aa5617f2a6cc4175641c40cdf981df819
-
Size
830KB
-
MD5
30b05fcbcd23896e795468eda9b40ad6
-
SHA1
c87b299142fe60f8300637ffe1f19ecdf0b27dd0
-
SHA256
b1f80b04b8d9fb69f7ba06d4759a669aa5617f2a6cc4175641c40cdf981df819
-
SHA512
b6b4fc160f6623ec44d8c41befd9e023119814528bee11d1e4f112d27ebe5a875f972075de0f0c47e403b36be22cfc21a0214c57a7088ce0067ea8044233a061
-
SSDEEP
12288:9y90vvAl22LIX80GmTistfg/hOr2iYpOR4BxB3oUeslyt6KcvdZ4Y6:9yYvC22IMg4/oYpy4/B95ygKcvdZ4Y6
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-