Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
8cdbbb9347f6027e32a1a9e695e40857678dcbf05978cee27ed7fb7a6fde0d2c
-
Size
261KB
-
Sample
220919-c2nyvsgfaq
-
MD5
f00b2c8bb2dce819f1f8d8cf17fbae18
-
SHA1
2a989c9e6404601630055b82668c0af9a6aef2c3
-
SHA256
8cdbbb9347f6027e32a1a9e695e40857678dcbf05978cee27ed7fb7a6fde0d2c
-
SHA512
bb21ae35d399d21c5ae5c8ffea25da6eb3a6c5f59dda89d62e679a1c3efb4553ab4cd5734088a2c727e160d985c3359c7ef71e6a46dc7df1575f5938f9e8d5eb
-
SSDEEP
6144:/gLWwMfpMS+3nsFJRMgWrIgAcCSo3UroHsFDwBUpQ:NbheKJRMrESo3U0Hsa62
Static task
static1
Behavioral task
behavioral1
Sample
8cdbbb9347f6027e32a1a9e695e40857678dcbf05978cee27ed7fb7a6fde0d2c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8cdbbb9347f6027e32a1a9e695e40857678dcbf05978cee27ed7fb7a6fde0d2c.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
8cdbbb9347f6027e32a1a9e695e40857678dcbf05978cee27ed7fb7a6fde0d2c
-
Size
261KB
-
MD5
f00b2c8bb2dce819f1f8d8cf17fbae18
-
SHA1
2a989c9e6404601630055b82668c0af9a6aef2c3
-
SHA256
8cdbbb9347f6027e32a1a9e695e40857678dcbf05978cee27ed7fb7a6fde0d2c
-
SHA512
bb21ae35d399d21c5ae5c8ffea25da6eb3a6c5f59dda89d62e679a1c3efb4553ab4cd5734088a2c727e160d985c3359c7ef71e6a46dc7df1575f5938f9e8d5eb
-
SSDEEP
6144:/gLWwMfpMS+3nsFJRMgWrIgAcCSo3UroHsFDwBUpQ:NbheKJRMrESo3U0Hsa62
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-