Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c0a1edad77f969254dd63f5f10b4a6d42e32689ea5d08a8c537eade586b1d441
-
Size
1.1MB
-
Sample
230426-qv17habe6x
-
MD5
75175bbe0385b2792ac7c069dec6a9e8
-
SHA1
6902a45e0522a2a2681e4d4827b1dce3c727ff31
-
SHA256
c0a1edad77f969254dd63f5f10b4a6d42e32689ea5d08a8c537eade586b1d441
-
SHA512
6709a85976c63cc63c01524aa462c5cefe130023a8fec945fba72f9616e1549238823fbbca98af9c46d832e756bcdc1f2aa43b9859ddd558a2c74e6205a5b84e
-
SSDEEP
24576:RyhBaL1bWRDzR3i0alqZjbX3Epduu+BPFVVVDvVziWjDd4RaJeUi:EhwLyzRS0aijD0ubBdrLzxB4Re
Static task
static1
Malware Config
Targets
-
-
Target
c0a1edad77f969254dd63f5f10b4a6d42e32689ea5d08a8c537eade586b1d441
-
Size
1.1MB
-
MD5
75175bbe0385b2792ac7c069dec6a9e8
-
SHA1
6902a45e0522a2a2681e4d4827b1dce3c727ff31
-
SHA256
c0a1edad77f969254dd63f5f10b4a6d42e32689ea5d08a8c537eade586b1d441
-
SHA512
6709a85976c63cc63c01524aa462c5cefe130023a8fec945fba72f9616e1549238823fbbca98af9c46d832e756bcdc1f2aa43b9859ddd558a2c74e6205a5b84e
-
SSDEEP
24576:RyhBaL1bWRDzR3i0alqZjbX3Epduu+BPFVVVDvVziWjDd4RaJeUi:EhwLyzRS0aijD0ubBdrLzxB4Re
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-