Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3931ab2e6249b1b8995594f498f73950bf43f7e8eb558d3046c80b5d4efc844d
-
Size
828KB
-
Sample
230422-fk849aef2y
-
MD5
ab46d8260e03691eb4605b56156e1184
-
SHA1
5c448536da8a91bdd6f6f3faddec406d7f795006
-
SHA256
3931ab2e6249b1b8995594f498f73950bf43f7e8eb558d3046c80b5d4efc844d
-
SHA512
4d8d53b8a64872da5ba5fbe37992297bd8f9ea4f306dcf182a6625c0a3d266b3c5c7200218486f9b1115d25171f4bb3a73b3a0baaeac32ce1698bf28cf703f40
-
SSDEEP
24576:dyvhzBvXeHsOTXWHxdKRHfsyc8g0kntLj:4bvXsTXEKRHEyNkZ
Static task
static1
Malware Config
Targets
-
-
Target
3931ab2e6249b1b8995594f498f73950bf43f7e8eb558d3046c80b5d4efc844d
-
Size
828KB
-
MD5
ab46d8260e03691eb4605b56156e1184
-
SHA1
5c448536da8a91bdd6f6f3faddec406d7f795006
-
SHA256
3931ab2e6249b1b8995594f498f73950bf43f7e8eb558d3046c80b5d4efc844d
-
SHA512
4d8d53b8a64872da5ba5fbe37992297bd8f9ea4f306dcf182a6625c0a3d266b3c5c7200218486f9b1115d25171f4bb3a73b3a0baaeac32ce1698bf28cf703f40
-
SSDEEP
24576:dyvhzBvXeHsOTXWHxdKRHfsyc8g0kntLj:4bvXsTXEKRHEyNkZ
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-