Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
8fbfabf88ebd15d5ed020247ebe038d21afcf4b4f750b47d1b266c18d91953dd
-
Size
479KB
-
Sample
230506-kl6gzage76
-
MD5
e294a708859d62043bcecc257e605b2a
-
SHA1
39bbfb29f774613e5104ccb4f35065cbc7a4bd6d
-
SHA256
8fbfabf88ebd15d5ed020247ebe038d21afcf4b4f750b47d1b266c18d91953dd
-
SHA512
237dfe424d6b1fbcd78077a65c96a4a879a57536988bbfc721bb480a45192eca008e2f437aae433aa6f555cdca3d8db2a907fcbe4248e562a9597e2bd6cc60e6
-
SSDEEP
12288:PMrxy90ITI8hHTj06zU/Q73AePjE7gsoEX1FJz73UVp:iydTdhsu+M54Esoknz73Y
Static task
static1
Malware Config
Targets
-
-
Target
8fbfabf88ebd15d5ed020247ebe038d21afcf4b4f750b47d1b266c18d91953dd
-
Size
479KB
-
MD5
e294a708859d62043bcecc257e605b2a
-
SHA1
39bbfb29f774613e5104ccb4f35065cbc7a4bd6d
-
SHA256
8fbfabf88ebd15d5ed020247ebe038d21afcf4b4f750b47d1b266c18d91953dd
-
SHA512
237dfe424d6b1fbcd78077a65c96a4a879a57536988bbfc721bb480a45192eca008e2f437aae433aa6f555cdca3d8db2a907fcbe4248e562a9597e2bd6cc60e6
-
SSDEEP
12288:PMrxy90ITI8hHTj06zU/Q73AePjE7gsoEX1FJz73UVp:iydTdhsu+M54Esoknz73Y
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-