Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Mm2 Duplicator.zip
-
Size
22.2MB
-
Sample
240506-shyxqaba49
-
MD5
709fdcf9d6a38af96e74bfb1adac3886
-
SHA1
0e7182724ec06f611575191fdd37ead0a0117b69
-
SHA256
d472f4cd0fdab699e6a67a73262682dbf864ed2fb34aeaadeedfe771f4c92b94
-
SHA512
e7e489afdda8b9d35b5a2d62c4bc82edc816182a10d3abd9ef2619e0afc3263cd9e9b8d551b87fc7ef54212c818285da778d1f48f98bac1a1002f152d46bba86
-
SSDEEP
393216:LWY48u8tLfl56jpxHUyhWKKmVsdM+b78hCec313RO0TWZS8b4Wuc1:Hvu8pNouQWKMPvecFKR4Wuc1
Static task
static1
Behavioral task
behavioral1
Sample
Mm2 Duplicator.exe
Resource
win7-20240419-en
Malware Config
Targets
-
-
Target
Mm2 Duplicator.exe
-
Size
66.5MB
-
MD5
de4239701e2752924f4cd708058e1270
-
SHA1
cc22264e5e8b44baee16dc557fac85ccd05d420f
-
SHA256
9db39c31fee60756e0b08ad1576b699350173eb2476d0c0e06e77e7b02931491
-
SHA512
67d3b8b6182b73a8e4aa393feaa50c577e1d82b0df4609f00317bfc331784a35a0a30234e80b6924af520c4a402adac9abaa2836c70c9d6c8bb1e7d6c9180f5a
-
SSDEEP
393216:3HlGwix6bVYeCovVXbiAi95SLc59c25vBFkIeG:3HlTixeYstEH59VfuIeG
-
Detect ZGRat V1
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-