Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file
-
Size
1.8MB
-
Sample
230503-ykbsvsab5s
-
MD5
7d64ba2ffbb9df61620ddd934eb8d8c5
-
SHA1
a158e73747d2f6acdf17dc18494a94b3b1899cb8
-
SHA256
8ffab91769a6ff3e57f1c5b26f580e0fe41e6dfe5cf05154dbcb77f181508d49
-
SHA512
40615c54109e0b01a15ceb7cca5c68a3857f71d6a95f187dbeafa2ac07f599a18a84c2e11ec9234b10dd64be532d0b11437c36e2bb14f7b82613c3999aaed783
-
SSDEEP
49152:A6aKm9kAk4SellJ6XMhFWAetCViT9nldW7s9AG5cq:ABKm9kAkK4XMLoCorg7s9Xcq
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
file
-
Size
1.8MB
-
MD5
7d64ba2ffbb9df61620ddd934eb8d8c5
-
SHA1
a158e73747d2f6acdf17dc18494a94b3b1899cb8
-
SHA256
8ffab91769a6ff3e57f1c5b26f580e0fe41e6dfe5cf05154dbcb77f181508d49
-
SHA512
40615c54109e0b01a15ceb7cca5c68a3857f71d6a95f187dbeafa2ac07f599a18a84c2e11ec9234b10dd64be532d0b11437c36e2bb14f7b82613c3999aaed783
-
SSDEEP
49152:A6aKm9kAk4SellJ6XMhFWAetCViT9nldW7s9AG5cq:ABKm9kAkK4XMLoCorg7s9Xcq
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-