Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ede42de45a694db9039b3179614eb6a26e9c34cb1d660a3dc11177bcb17d3f3f.exe
-
Size
14.2MB
-
Sample
240603-bmyn3sea3w
-
MD5
1548224f8551dfc606b9df44c4925162
-
SHA1
dd0435cf225ef9c1335bd506d3d06dddadebc0fe
-
SHA256
ede42de45a694db9039b3179614eb6a26e9c34cb1d660a3dc11177bcb17d3f3f
-
SHA512
33c0dcb808be041bc24466d6e117a11f3f91f7fbd3a7951230ca03b0bb2d8c7f0310c3f000f4e0efca6d18a9fd298757515cb2be63c96d1a11f826c341058061
-
SSDEEP
393216:sEkZgf8Xq1+TtIiFGvvB5IjWqn6eclz10yuq+d:sRbXq1QtIZX3ILn6eccyr+d
Behavioral task
behavioral1
Sample
ede42de45a694db9039b3179614eb6a26e9c34cb1d660a3dc11177bcb17d3f3f.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
ede42de45a694db9039b3179614eb6a26e9c34cb1d660a3dc11177bcb17d3f3f.exe
-
Size
14.2MB
-
MD5
1548224f8551dfc606b9df44c4925162
-
SHA1
dd0435cf225ef9c1335bd506d3d06dddadebc0fe
-
SHA256
ede42de45a694db9039b3179614eb6a26e9c34cb1d660a3dc11177bcb17d3f3f
-
SHA512
33c0dcb808be041bc24466d6e117a11f3f91f7fbd3a7951230ca03b0bb2d8c7f0310c3f000f4e0efca6d18a9fd298757515cb2be63c96d1a11f826c341058061
-
SSDEEP
393216:sEkZgf8Xq1+TtIiFGvvB5IjWqn6eclz10yuq+d:sRbXq1QtIZX3ILn6eccyr+d
-
Drops startup file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-