Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
999fa14f19d0882319f62ccabfcb92a9de1c098f3625316081a920df49fb5a52
-
Size
46KB
-
Sample
241005-bfmy1awfmm
-
MD5
b71825b72e712c35abad5bd272fccbbb
-
SHA1
f981e3296242b0af200d098b89f9a25e102c1cce
-
SHA256
999fa14f19d0882319f62ccabfcb92a9de1c098f3625316081a920df49fb5a52
-
SHA512
e825434f76279b273fb4d3459258a47af22397f67bb8558ac8a8a95a3cea6b40ff9a3fcd6fca2a30fd068c3e484ffa9c5d5ca964fcf3d1bcf7f1998502d59f05
-
SSDEEP
768:ueKHbBtL8FFswCSpj2/sWYOh5Ti9to8Qm/O+3yVX7DvQzTGfLE:y7BtLsFrC0jVhOK9VV2/fQn
Static task
static1
Behavioral task
behavioral1
Sample
999fa14f19d0882319f62ccabfcb92a9de1c098f3625316081a920df49fb5a52.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
999fa14f19d0882319f62ccabfcb92a9de1c098f3625316081a920df49fb5a52.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
Protocol: ftp- Host:
ftp.tripod.com - Port:
21 - Username:
onthelinux - Password:
741852abc
Targets
-
-
Target
999fa14f19d0882319f62ccabfcb92a9de1c098f3625316081a920df49fb5a52
-
Size
46KB
-
MD5
b71825b72e712c35abad5bd272fccbbb
-
SHA1
f981e3296242b0af200d098b89f9a25e102c1cce
-
SHA256
999fa14f19d0882319f62ccabfcb92a9de1c098f3625316081a920df49fb5a52
-
SHA512
e825434f76279b273fb4d3459258a47af22397f67bb8558ac8a8a95a3cea6b40ff9a3fcd6fca2a30fd068c3e484ffa9c5d5ca964fcf3d1bcf7f1998502d59f05
-
SSDEEP
768:ueKHbBtL8FFswCSpj2/sWYOh5Ti9to8Qm/O+3yVX7DvQzTGfLE:y7BtLsFrC0jVhOK9VV2/fQn
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-