Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
dc7e532c749b56b1cc8b6e582973c075e37306fd5c530172aa635fc0d8ab4d3f
-
Size
1.2MB
-
Sample
230423-vhhlvaef99
-
MD5
4b146ed8802e81771bd02232d5b7a360
-
SHA1
6152994291a1ff3bc7d42ae4b8ac7c1a84c52185
-
SHA256
dc7e532c749b56b1cc8b6e582973c075e37306fd5c530172aa635fc0d8ab4d3f
-
SHA512
60b838902969aa240cc16743c252c442db25b326742c79dbe2990a62654f6a838d3f7affb67124f6f7ca04aa187d6c5577af538acb2f8f282acabf57a6267e72
-
SSDEEP
24576:vO72Bb3C+EnMAVTWzFIjU7hYCg7CMv8Z3wU0dU8+Oia4DY1j5:jBbBEMA+w0zKv8gzU44k
Static task
static1
Malware Config
Targets
-
-
Target
dc7e532c749b56b1cc8b6e582973c075e37306fd5c530172aa635fc0d8ab4d3f
-
Size
1.2MB
-
MD5
4b146ed8802e81771bd02232d5b7a360
-
SHA1
6152994291a1ff3bc7d42ae4b8ac7c1a84c52185
-
SHA256
dc7e532c749b56b1cc8b6e582973c075e37306fd5c530172aa635fc0d8ab4d3f
-
SHA512
60b838902969aa240cc16743c252c442db25b326742c79dbe2990a62654f6a838d3f7affb67124f6f7ca04aa187d6c5577af538acb2f8f282acabf57a6267e72
-
SSDEEP
24576:vO72Bb3C+EnMAVTWzFIjU7hYCg7CMv8Z3wU0dU8+Oia4DY1j5:jBbBEMA+w0zKv8gzU44k
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-