Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
73d47a6ff1c73d751ed1586d213f2eae4da4fa1ac5e920a42fc590c2f27ae0d6
-
Size
827KB
-
Sample
230422-dtpe4acb38
-
MD5
482179df03b6bc1736c12602ecc127f7
-
SHA1
d29ac9bc4d05bb7a92767112414b2b74fa6f993d
-
SHA256
73d47a6ff1c73d751ed1586d213f2eae4da4fa1ac5e920a42fc590c2f27ae0d6
-
SHA512
2e853a29be4083a134e42e89a4a01552cfafeb4f8c5b5ecce077c5351f41c68ce92104cc5edfcfd8f334a0a84a250c224ece92b1d6167d564dc830e5c30c4099
-
SSDEEP
12288:Ry90tq/7ZLSy0ZLqUCbVZEFMqDxFhwrjiEROapvHaoNjIk5PqWQHE46nITNuX2OX:Ry5dGpZ2zAJERRYoN7D/nYuX2OX
Static task
static1
Malware Config
Targets
-
-
Target
73d47a6ff1c73d751ed1586d213f2eae4da4fa1ac5e920a42fc590c2f27ae0d6
-
Size
827KB
-
MD5
482179df03b6bc1736c12602ecc127f7
-
SHA1
d29ac9bc4d05bb7a92767112414b2b74fa6f993d
-
SHA256
73d47a6ff1c73d751ed1586d213f2eae4da4fa1ac5e920a42fc590c2f27ae0d6
-
SHA512
2e853a29be4083a134e42e89a4a01552cfafeb4f8c5b5ecce077c5351f41c68ce92104cc5edfcfd8f334a0a84a250c224ece92b1d6167d564dc830e5c30c4099
-
SSDEEP
12288:Ry90tq/7ZLSy0ZLqUCbVZEFMqDxFhwrjiEROapvHaoNjIk5PqWQHE46nITNuX2OX:Ry5dGpZ2zAJERRYoN7D/nYuX2OX
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-