Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0ac38b7552b6da15b0ca436ac286e5bd5c5d2d72daa3a93bf490dc2e6d94f185
-
Size
827KB
-
Sample
230422-letehaea94
-
MD5
5e015ddfe4f390577036df7f3fcafbe6
-
SHA1
adfd0f1fac3f3b4dcd9515fee07503526a27376f
-
SHA256
0ac38b7552b6da15b0ca436ac286e5bd5c5d2d72daa3a93bf490dc2e6d94f185
-
SHA512
736d8b01b604f31e8d6d9a358438034b90dcd402db5ddcdff2fb5b9a13f996397ae124bbfa90819bcd0f4f4df250244ce1ec0e9e8da7ec84c8ba52ebfae22771
-
SSDEEP
12288:Dy90ikPCUc3YyqbFpPMTLfEaV9qgxE9JIOyrMT/oU86x7uBhKHYusfb7Br:DyU/c30fPMTLfEavEPf3sPK4tr
Static task
static1
Malware Config
Targets
-
-
Target
0ac38b7552b6da15b0ca436ac286e5bd5c5d2d72daa3a93bf490dc2e6d94f185
-
Size
827KB
-
MD5
5e015ddfe4f390577036df7f3fcafbe6
-
SHA1
adfd0f1fac3f3b4dcd9515fee07503526a27376f
-
SHA256
0ac38b7552b6da15b0ca436ac286e5bd5c5d2d72daa3a93bf490dc2e6d94f185
-
SHA512
736d8b01b604f31e8d6d9a358438034b90dcd402db5ddcdff2fb5b9a13f996397ae124bbfa90819bcd0f4f4df250244ce1ec0e9e8da7ec84c8ba52ebfae22771
-
SSDEEP
12288:Dy90ikPCUc3YyqbFpPMTLfEaV9qgxE9JIOyrMT/oU86x7uBhKHYusfb7Br:DyU/c30fPMTLfEavEPf3sPK4tr
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-