Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file__escape_from_monkey_island_v1_1_zip__________.exe
-
Size
1.9MB
-
Sample
220921-gl6k7afdd4
-
MD5
43959b593ea94d58856e4c1eff4dde03
-
SHA1
e3e850b622bc76c12872a9503197359759b4837f
-
SHA256
f92d7bc5399737179cbb9e10fc5c083bcca2138881cddfdb7d7a4f6d7c5e3a96
-
SHA512
afbfa94bfe05b039e34dd1b0eabf2d24f8043a188f7338f834ea39730ef294aa33c6a8277d85bb5e25be2b5c108be9bc806786d913238d75f49d8f700a8c7ba7
-
SSDEEP
24576:K7FUDowAyrTVE3U5FmJT72pQ0qr/ygA8XVKZzs29eo5x7awFhJdNo69lOy7KTiju:KBuZrEUAa3qrU8UZzs29555DdN7POGju
Static task
static1
Behavioral task
behavioral1
Sample
file__escape_from_monkey_island_v1_1_zip__________.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
file__escape_from_monkey_island_v1_1_zip__________.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
file__escape_from_monkey_island_v1_1_zip__________.exe
-
Size
1.9MB
-
MD5
43959b593ea94d58856e4c1eff4dde03
-
SHA1
e3e850b622bc76c12872a9503197359759b4837f
-
SHA256
f92d7bc5399737179cbb9e10fc5c083bcca2138881cddfdb7d7a4f6d7c5e3a96
-
SHA512
afbfa94bfe05b039e34dd1b0eabf2d24f8043a188f7338f834ea39730ef294aa33c6a8277d85bb5e25be2b5c108be9bc806786d913238d75f49d8f700a8c7ba7
-
SSDEEP
24576:K7FUDowAyrTVE3U5FmJT72pQ0qr/ygA8XVKZzs29eo5x7awFhJdNo69lOy7KTiju:KBuZrEUAa3qrU8UZzs29555DdN7POGju
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious use of SetThreadContext
-