Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
vaultFile11542278852936095360.exe
-
Size
209KB
-
Sample
240118-sdbxdscgbj
-
MD5
2c728b8d169a71f995b2b06f70e1949c
-
SHA1
566799671a67ade9ac1319ee9c9526798afd8aeb
-
SHA256
fa679f8844ab283168f56247764b5e44cddd0aad6aea878fb213b80b54d51ce4
-
SHA512
cc07d587e64982232570cb7b7fdc858a449cdb1fc268a0954d69d2a90b4fcf3e73d0c44706d9533d7d4e8d2ad977f06819459711b22604615039b181370af707
-
SSDEEP
3072:p86dHxGNd5E9o7lOCET1NNAhTtaWmZzFfokt+F9EepWL2tI2b3UH8XAwKYEJ:plJ4Nwo7lOpT2hkWGzxU7pBwHSXEJ
Static task
static1
Behavioral task
behavioral1
Sample
vaultFile11542278852936095360.exe
Resource
win7-20231215-en
Malware Config
Targets
-
-
Target
vaultFile11542278852936095360.exe
-
Size
209KB
-
MD5
2c728b8d169a71f995b2b06f70e1949c
-
SHA1
566799671a67ade9ac1319ee9c9526798afd8aeb
-
SHA256
fa679f8844ab283168f56247764b5e44cddd0aad6aea878fb213b80b54d51ce4
-
SHA512
cc07d587e64982232570cb7b7fdc858a449cdb1fc268a0954d69d2a90b4fcf3e73d0c44706d9533d7d4e8d2ad977f06819459711b22604615039b181370af707
-
SSDEEP
3072:p86dHxGNd5E9o7lOCET1NNAhTtaWmZzFfokt+F9EepWL2tI2b3UH8XAwKYEJ:plJ4Nwo7lOpT2hkWGzxU7pBwHSXEJ
-
XMRig Miner payload
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-