Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
892b71e58d4877dd51af4ec3252b8b421a0360cbdbc683f038708afa8e20ebe6
-
Size
317KB
-
Sample
240513-lep23shc69
-
MD5
2872f0a2ad69d402bea8b00c214c1521
-
SHA1
069e5d291a6a644702564a1746f0408409b086af
-
SHA256
892b71e58d4877dd51af4ec3252b8b421a0360cbdbc683f038708afa8e20ebe6
-
SHA512
5593cdd837290bf57d4c8d20ab209a7cb2400f99d322a9709f5e61db0d1cfb55deea47aaf4352d38b13580c2ba86dbd89806942db428179d5bce7bf957ac7c38
-
SSDEEP
6144:Gb5NBYXsH27h3ff4iTnPTFUMSEVRsuLC:GlNBalLJjPsuO
Static task
static1
Behavioral task
behavioral1
Sample
892b71e58d4877dd51af4ec3252b8b421a0360cbdbc683f038708afa8e20ebe6.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
gcleaner
185.172.128.90
5.42.65.64
-
url_path
/advdlc.php
Targets
-
-
Target
892b71e58d4877dd51af4ec3252b8b421a0360cbdbc683f038708afa8e20ebe6
-
Size
317KB
-
MD5
2872f0a2ad69d402bea8b00c214c1521
-
SHA1
069e5d291a6a644702564a1746f0408409b086af
-
SHA256
892b71e58d4877dd51af4ec3252b8b421a0360cbdbc683f038708afa8e20ebe6
-
SHA512
5593cdd837290bf57d4c8d20ab209a7cb2400f99d322a9709f5e61db0d1cfb55deea47aaf4352d38b13580c2ba86dbd89806942db428179d5bce7bf957ac7c38
-
SSDEEP
6144:Gb5NBYXsH27h3ff4iTnPTFUMSEVRsuLC:GlNBalLJjPsuO
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-