Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ceb6aeec4ed9a9b5e836db8f61e251234940b62e015e2f0a3560b95ab79c2ef1
-
Size
931KB
-
Sample
230425-nje4sabh4x
-
MD5
739e320b0b517cdee3033a018a753609
-
SHA1
dd952e0bb677569878108c6b3ee76edb997d8836
-
SHA256
ceb6aeec4ed9a9b5e836db8f61e251234940b62e015e2f0a3560b95ab79c2ef1
-
SHA512
49d0e2d5aee6d1999a069a70644f7d28918241b8186f77e3bfa7e0f26a2e3434f0e643d86899e2e09e6d4c49c45fc3092e4ed98fa6519f7061ecae8b88f5f3d8
-
SSDEEP
24576:vqGBYOCrAPZg7ov0aR3S8rljm3XWwG9JG:cOCrAd0aR3S8pjmHWw
Static task
static1
Malware Config
Targets
-
-
Target
ceb6aeec4ed9a9b5e836db8f61e251234940b62e015e2f0a3560b95ab79c2ef1
-
Size
931KB
-
MD5
739e320b0b517cdee3033a018a753609
-
SHA1
dd952e0bb677569878108c6b3ee76edb997d8836
-
SHA256
ceb6aeec4ed9a9b5e836db8f61e251234940b62e015e2f0a3560b95ab79c2ef1
-
SHA512
49d0e2d5aee6d1999a069a70644f7d28918241b8186f77e3bfa7e0f26a2e3434f0e643d86899e2e09e6d4c49c45fc3092e4ed98fa6519f7061ecae8b88f5f3d8
-
SSDEEP
24576:vqGBYOCrAPZg7ov0aR3S8rljm3XWwG9JG:cOCrAd0aR3S8pjmHWw
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-