Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
785ed07200948fccfa7c4ac7690f4010c0741af387c4ce012a40e8070e036920
-
Size
89KB
-
Sample
221003-dypxesfeaj
-
MD5
59570179859c1eb4286b100aaf25cd74
-
SHA1
5a87f58be1d93e2c440d80e2a3415b0f143a9d33
-
SHA256
785ed07200948fccfa7c4ac7690f4010c0741af387c4ce012a40e8070e036920
-
SHA512
f3dae0c5b9cfbef900908c69613e5c5e9b772ef0f3cfdbcd6ed6ea8dceab94635d7bcd09d6ec028f61531ba268a419dded5010a53740be4b62a0aade93c1c88f
-
SSDEEP
1536:7keK40T/mx7y9v7Z/Z2V/GSAFRfBh7VoKI:AD40Dmx7y9DZ/Z2hGVaKI
Static task
static1
Behavioral task
behavioral1
Sample
785ed07200948fccfa7c4ac7690f4010c0741af387c4ce012a40e8070e036920.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
785ed07200948fccfa7c4ac7690f4010c0741af387c4ce012a40e8070e036920.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
785ed07200948fccfa7c4ac7690f4010c0741af387c4ce012a40e8070e036920
-
Size
89KB
-
MD5
59570179859c1eb4286b100aaf25cd74
-
SHA1
5a87f58be1d93e2c440d80e2a3415b0f143a9d33
-
SHA256
785ed07200948fccfa7c4ac7690f4010c0741af387c4ce012a40e8070e036920
-
SHA512
f3dae0c5b9cfbef900908c69613e5c5e9b772ef0f3cfdbcd6ed6ea8dceab94635d7bcd09d6ec028f61531ba268a419dded5010a53740be4b62a0aade93c1c88f
-
SSDEEP
1536:7keK40T/mx7y9v7Z/Z2V/GSAFRfBh7VoKI:AD40Dmx7y9DZ/Z2hGVaKI
Score10/10-
Modifies WinLogon for persistence
-
Modifies visibility of file extensions in Explorer
-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-