Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f853fd27325ec501c4c7dd056513a47255fa8aa6cdfed73f4e8d892bfbd3e297
-
Size
1.2MB
-
Sample
230423-r5f5raff4x
-
MD5
15c796cc0f24fa0ddc36c77fd6a4ac9e
-
SHA1
6909ebedce422ecba2bcb5ffd8c6c7b793bd02c8
-
SHA256
f853fd27325ec501c4c7dd056513a47255fa8aa6cdfed73f4e8d892bfbd3e297
-
SHA512
c4d57a29f2ed03093a397781cbe916e10f2404467ca8523cdd23c1a24c4592d8329fa3910843e37394a135945244d7f9a697afa68d0b5c7a34c3340daae69e17
-
SSDEEP
24576:LUcKJEq27vir3VnDKRthL4H70Hop1YZzBOVkicYVgcLtFonRiv:LSeq2MZSjLg70cCZdITrrARi
Static task
static1
Malware Config
Targets
-
-
Target
f853fd27325ec501c4c7dd056513a47255fa8aa6cdfed73f4e8d892bfbd3e297
-
Size
1.2MB
-
MD5
15c796cc0f24fa0ddc36c77fd6a4ac9e
-
SHA1
6909ebedce422ecba2bcb5ffd8c6c7b793bd02c8
-
SHA256
f853fd27325ec501c4c7dd056513a47255fa8aa6cdfed73f4e8d892bfbd3e297
-
SHA512
c4d57a29f2ed03093a397781cbe916e10f2404467ca8523cdd23c1a24c4592d8329fa3910843e37394a135945244d7f9a697afa68d0b5c7a34c3340daae69e17
-
SSDEEP
24576:LUcKJEq27vir3VnDKRthL4H70Hop1YZzBOVkicYVgcLtFonRiv:LSeq2MZSjLg70cCZdITrrARi
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-