Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
202401066edb1ae133124b052a5d230933c9be89karaganymafiamagniber.exe
-
Size
308KB
-
Sample
240107-x3szescdck
-
MD5
6edb1ae133124b052a5d230933c9be89
-
SHA1
46b03d9ca430b171eff1faf9f2a68405fd7a79df
-
SHA256
14337c9439733bec80a16ae7d32bf28265d91986a7c1c80ead79d4a26c8099a1
-
SHA512
2786049e994d2cf716ed709cbc0b5de5132da43a8fff0b64e9e58cce8f7c44e8ff614b2cf80430246311d0465adf4dc4bb32b1442cee8f1a39144391ccf3b2f1
-
SSDEEP
3072:wmBr3balBclw29DXaPB2J9ot3nPIGX30caGhDgGCcc4Go0ER5IY0ms41:wmBrrDDX0tXT30vzHF4Go0+Fs41
Static task
static1
Behavioral task
behavioral1
Sample
202401066edb1ae133124b052a5d230933c9be89karaganymafiamagniber.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
202401066edb1ae133124b052a5d230933c9be89karaganymafiamagniber.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
202401066edb1ae133124b052a5d230933c9be89karaganymafiamagniber.exe
-
Size
308KB
-
MD5
6edb1ae133124b052a5d230933c9be89
-
SHA1
46b03d9ca430b171eff1faf9f2a68405fd7a79df
-
SHA256
14337c9439733bec80a16ae7d32bf28265d91986a7c1c80ead79d4a26c8099a1
-
SHA512
2786049e994d2cf716ed709cbc0b5de5132da43a8fff0b64e9e58cce8f7c44e8ff614b2cf80430246311d0465adf4dc4bb32b1442cee8f1a39144391ccf3b2f1
-
SSDEEP
3072:wmBr3balBclw29DXaPB2J9ot3nPIGX30caGhDgGCcc4Go0ER5IY0ms41:wmBrrDDX0tXT30vzHF4Go0+Fs41
Score10/10-
GandCrab payload
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-