Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2f09ed2bcf62c7720c18d8eb7daa73ab.exe
-
Size
752KB
-
Sample
230424-nckexsbd92
-
MD5
2f09ed2bcf62c7720c18d8eb7daa73ab
-
SHA1
f3771a73dd6b1221747e57e38521f6ef7b15cf84
-
SHA256
8f049de0dfd9cd721e8407fd80b05e4c7660ec14f039fb38822ca4c7e1cd12fd
-
SHA512
a5f24e158f592bcef95428364e0f66b08f93adbd0b6df386e00417e70a8a19ec2104d1cd6af1a2628c526a8e68120d3c1fe715542b9b643b5ea6c89fb9ab8374
-
SSDEEP
12288:Ny90EyuJvz5i/WT0wFDOxtpdt/ChJM7XpMWTtxdJ+AWd6V69g9SzFmD6l6:NyfyuJti/XEo9tsMX2WTf/+NCl+mD60
Static task
static1
Behavioral task
behavioral1
Sample
2f09ed2bcf62c7720c18d8eb7daa73ab.exe
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
2f09ed2bcf62c7720c18d8eb7daa73ab.exe
-
Size
752KB
-
MD5
2f09ed2bcf62c7720c18d8eb7daa73ab
-
SHA1
f3771a73dd6b1221747e57e38521f6ef7b15cf84
-
SHA256
8f049de0dfd9cd721e8407fd80b05e4c7660ec14f039fb38822ca4c7e1cd12fd
-
SHA512
a5f24e158f592bcef95428364e0f66b08f93adbd0b6df386e00417e70a8a19ec2104d1cd6af1a2628c526a8e68120d3c1fe715542b9b643b5ea6c89fb9ab8374
-
SSDEEP
12288:Ny90EyuJvz5i/WT0wFDOxtpdt/ChJM7XpMWTtxdJ+AWd6V69g9SzFmD6l6:NyfyuJti/XEo9tsMX2WTf/+NCl+mD60
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-