Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a10680a57e6cb714dddb2f39adb3ddb90781d0cff119efe9470d5e56768d5561
-
Size
711KB
-
Sample
230504-sdvphadb85
-
MD5
17b5e3febac7da943b8171124f0d1a8e
-
SHA1
30dd510e7c8f8ae1282c3731a86aace8d1d4fc61
-
SHA256
a10680a57e6cb714dddb2f39adb3ddb90781d0cff119efe9470d5e56768d5561
-
SHA512
b176c14674fbdd966e40c47d6d4b94588ee96363f1d9614d972c86bf6f03fb702740fb051d1d5c5dc9118b2ba1f948ded98ffb2eba1bc43dc0ced2302767d860
-
SSDEEP
12288:XMr7y90yFsaFB1ztBoV6TE8M41UCcLN5nMplO6tcdc7z0eoU4S4iPxtzTUzBU:UyzFsajdoVIE8HjO5MK6tX7QfU4PigBU
Static task
static1
Malware Config
Targets
-
-
Target
a10680a57e6cb714dddb2f39adb3ddb90781d0cff119efe9470d5e56768d5561
-
Size
711KB
-
MD5
17b5e3febac7da943b8171124f0d1a8e
-
SHA1
30dd510e7c8f8ae1282c3731a86aace8d1d4fc61
-
SHA256
a10680a57e6cb714dddb2f39adb3ddb90781d0cff119efe9470d5e56768d5561
-
SHA512
b176c14674fbdd966e40c47d6d4b94588ee96363f1d9614d972c86bf6f03fb702740fb051d1d5c5dc9118b2ba1f948ded98ffb2eba1bc43dc0ced2302767d860
-
SSDEEP
12288:XMr7y90yFsaFB1ztBoV6TE8M41UCcLN5nMplO6tcdc7z0eoU4S4iPxtzTUzBU:UyzFsajdoVIE8HjO5MK6tX7QfU4PigBU
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-