Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
System.exe
-
Size
11.4MB
-
Sample
230801-gff4cadf65
-
MD5
db43080913c00700c9594c80b9b0136e
-
SHA1
1995345c37e03c519f04f01f96af44627a6864f4
-
SHA256
eed8daf124aa2e45b77d2e3ecf36030ab7fb68890d0130ade09cc6e4d83536b5
-
SHA512
ba215a2323855105f5bd38105258786879e257ccde15c1501327539913521d820d298ed18b852888d1fcf7bb042a00a4d4b98d0f065a7efbd02d39e8e62eab58
-
SSDEEP
196608:uCT+aj1dsbcUdUnYc0o5Gd7+6YMdBvIoP1HGzyAoxDyEFh/bhEqjFFReyQfDP2tp:uCT+aQbPmYRQK7+NqP1RmUh/7EfDPes
Behavioral task
behavioral1
Sample
System.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
System.exe
-
Size
11.4MB
-
MD5
db43080913c00700c9594c80b9b0136e
-
SHA1
1995345c37e03c519f04f01f96af44627a6864f4
-
SHA256
eed8daf124aa2e45b77d2e3ecf36030ab7fb68890d0130ade09cc6e4d83536b5
-
SHA512
ba215a2323855105f5bd38105258786879e257ccde15c1501327539913521d820d298ed18b852888d1fcf7bb042a00a4d4b98d0f065a7efbd02d39e8e62eab58
-
SSDEEP
196608:uCT+aj1dsbcUdUnYc0o5Gd7+6YMdBvIoP1HGzyAoxDyEFh/bhEqjFFReyQfDP2tp:uCT+aQbPmYRQK7+NqP1RmUh/7EfDPes
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-