Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0dc7d0b6fd6bd2e157f3be4b6b20fe4d.bin
-
Size
14.2MB
-
Sample
240122-bc3kaadadq
-
MD5
a2aaa4a349ae936f89b3a7de8637bffe
-
SHA1
2f700d120ae1bbaf1195661db4cd49ba3ef227e1
-
SHA256
c87a5710a24435b53aa79106b6b735aab4cec83810cb7e84c8046a0c9a8c56f9
-
SHA512
8516c1546e073da07f4db6e9c4ff822ba00675df5c68b81b8bb395f750f83f5e2c8c46cdc6393ad35a7e7896e8e58734fc2827e21e354f57b369aca872b854b2
-
SSDEEP
196608:d7llDeo2DRdeDOZjr9IhT1g+feHbLiWeNNuCtJpIZtXw3sHDsuRvT0VuBDLe63ul:tTDstcDO1KZKtHP70IohueEDLe63ul
Behavioral task
behavioral1
Sample
f16ca2056d872f1cae446a151e057fe1d5744f6f26889881050f254008c5a5b4.exe
Resource
win7-20231215-en
Malware Config
Targets
-
-
Target
f16ca2056d872f1cae446a151e057fe1d5744f6f26889881050f254008c5a5b4.exe
-
Size
14.4MB
-
MD5
0dc7d0b6fd6bd2e157f3be4b6b20fe4d
-
SHA1
5784f5beb1cd3b5aa222aaf0484c52547d5759a5
-
SHA256
f16ca2056d872f1cae446a151e057fe1d5744f6f26889881050f254008c5a5b4
-
SHA512
8274ba73140c6c1b7005ae3fbc84f320e1e7181d12507518ba8a6854d02ceeecfca314378c8247e9bc30c85ecd4f159e15774f5fa2f8362a5911c14fd3c69160
-
SSDEEP
393216:qiIE7YoPQPdQuslSq99oWOv+9fg/kMeTl2Y:T7rPQPdQuSDorvSY/k/l
-
Drops startup file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-