Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
5a540ed7651ff8ef1f21893d78866f1c35464468e929a2ecea6b8076aa1abe15
-
Size
965KB
-
Sample
230422-k3r1xaea38
-
MD5
a3954f88c5d2e4312dbd9f1434f62647
-
SHA1
c914b82e5d8b7f8dcba59c69f965d1c289619699
-
SHA256
5a540ed7651ff8ef1f21893d78866f1c35464468e929a2ecea6b8076aa1abe15
-
SHA512
6396e98059bb4debb8fc6874effeb1a94e9135ab6bc928ca5fe52b5b768b71de5536ef124d52e1f48923fd853cd6a55d3f4b9f737807dfa71302fdf5d952c9dd
-
SSDEEP
24576:3yH59o0tS3+K4G6OEJxjcpYvUP2BZfZ9DTgKf5:CH59PA6FjcpwnB9DTgKf
Static task
static1
Malware Config
Targets
-
-
Target
5a540ed7651ff8ef1f21893d78866f1c35464468e929a2ecea6b8076aa1abe15
-
Size
965KB
-
MD5
a3954f88c5d2e4312dbd9f1434f62647
-
SHA1
c914b82e5d8b7f8dcba59c69f965d1c289619699
-
SHA256
5a540ed7651ff8ef1f21893d78866f1c35464468e929a2ecea6b8076aa1abe15
-
SHA512
6396e98059bb4debb8fc6874effeb1a94e9135ab6bc928ca5fe52b5b768b71de5536ef124d52e1f48923fd853cd6a55d3f4b9f737807dfa71302fdf5d952c9dd
-
SSDEEP
24576:3yH59o0tS3+K4G6OEJxjcpYvUP2BZfZ9DTgKf5:CH59PA6FjcpwnB9DTgKf
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-