Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
56a1ddb980dc1556abf6a4af401a43e643c5f9e781d37f060f846e344a1b653e
-
Size
1.2MB
-
Sample
230423-s1b6nsec47
-
MD5
f17ed66b0cc3b6e44c30af429afc29aa
-
SHA1
42dcef5454874860ee3a30c31304d050501a1a4e
-
SHA256
56a1ddb980dc1556abf6a4af401a43e643c5f9e781d37f060f846e344a1b653e
-
SHA512
0bbaea631bcebbbeea6c8b3e51d5c3e6f5f2762967145b1a6fa36c0b8c9c7d49458377ac7955756edd196161ec34fc8e272d56e73bfd29aba556f5449adb7380
-
SSDEEP
24576:n1ZsBTEorSUm/X0ajcGd9lD3PMRY88PMrLC7rV1Rx/F:1KdfrlqVQE9lj4J8UrLAh
Static task
static1
Malware Config
Targets
-
-
Target
56a1ddb980dc1556abf6a4af401a43e643c5f9e781d37f060f846e344a1b653e
-
Size
1.2MB
-
MD5
f17ed66b0cc3b6e44c30af429afc29aa
-
SHA1
42dcef5454874860ee3a30c31304d050501a1a4e
-
SHA256
56a1ddb980dc1556abf6a4af401a43e643c5f9e781d37f060f846e344a1b653e
-
SHA512
0bbaea631bcebbbeea6c8b3e51d5c3e6f5f2762967145b1a6fa36c0b8c9c7d49458377ac7955756edd196161ec34fc8e272d56e73bfd29aba556f5449adb7380
-
SSDEEP
24576:n1ZsBTEorSUm/X0ajcGd9lD3PMRY88PMrLC7rV1Rx/F:1KdfrlqVQE9lj4J8UrLAh
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-