Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
557ec7d2146b463a5ba965f466d651dc283c70f8314ea602756bf152f9d68112
-
Size
376KB
-
Sample
230504-zk1bwsgh7w
-
MD5
1f03374525fe661437e9b49fc661fe64
-
SHA1
3253adcf258456beb24a49c9a950a000189aad8b
-
SHA256
557ec7d2146b463a5ba965f466d651dc283c70f8314ea602756bf152f9d68112
-
SHA512
42a8086356302e8cc8c318692a05c272d5ec582c656329a9c3096032a859d97e6ef37af20f17ee6a72de7622dc4ecaddcb2107468fe79666867b946c657453f9
-
SSDEEP
6144:KVy+bnr+Rp0yN90QEOuqEEiHqHD/oE6FcbpoboyhbdI66kF:vMr5y90w4o56FcbCbBhW66Y
Static task
static1
Malware Config
Targets
-
-
Target
557ec7d2146b463a5ba965f466d651dc283c70f8314ea602756bf152f9d68112
-
Size
376KB
-
MD5
1f03374525fe661437e9b49fc661fe64
-
SHA1
3253adcf258456beb24a49c9a950a000189aad8b
-
SHA256
557ec7d2146b463a5ba965f466d651dc283c70f8314ea602756bf152f9d68112
-
SHA512
42a8086356302e8cc8c318692a05c272d5ec582c656329a9c3096032a859d97e6ef37af20f17ee6a72de7622dc4ecaddcb2107468fe79666867b946c657453f9
-
SSDEEP
6144:KVy+bnr+Rp0yN90QEOuqEEiHqHD/oE6FcbpoboyhbdI66kF:vMr5y90w4o56FcbCbBhW66Y
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-