Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Sample_price list_new order.exe
-
Size
643KB
-
Sample
220612-rwp2asbbc5
-
MD5
d5ad3655ac02936e060e384f1078c7f5
-
SHA1
39448e2ba7f287ecf60f95589072ddcf7cdc0369
-
SHA256
2213c9b915e45237c418089f12469a32144e7bd18bb1a79ada1f45b861d56518
-
SHA512
c36d8376276a964ea818df17c9233fa75745de84d33ddd6d0e21260acd760980f106fa747f6d51d3623e1b4c329e10e48fabff8bcd97fbba57ad348bf3ccde93
Static task
static1
Behavioral task
behavioral1
Sample
Sample_price list_new order.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Sample_price list_new order.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
oski
masterwork2.co.vu
Targets
-
-
Target
Sample_price list_new order.exe
-
Size
643KB
-
MD5
d5ad3655ac02936e060e384f1078c7f5
-
SHA1
39448e2ba7f287ecf60f95589072ddcf7cdc0369
-
SHA256
2213c9b915e45237c418089f12469a32144e7bd18bb1a79ada1f45b861d56518
-
SHA512
c36d8376276a964ea818df17c9233fa75745de84d33ddd6d0e21260acd760980f106fa747f6d51d3623e1b4c329e10e48fabff8bcd97fbba57ad348bf3ccde93
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext
-