Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
df999d74bf1052d031b84164e5029508528bb76feb7ec14caa6b92abd129f8a2
-
Size
840KB
-
Sample
221004-eazx6abcap
-
MD5
024ffc0a906b6ef8618e02c6349b1e61
-
SHA1
eebb32abf9151f35345869181eb8ffb88f21fabe
-
SHA256
df999d74bf1052d031b84164e5029508528bb76feb7ec14caa6b92abd129f8a2
-
SHA512
00982b9809900bb2cc05592c5d03608c43823bab0f377766b476e248c0ff2716041fab3ae7c4c1a9d6527e0e483078207c15e47ec7c7fa0579372c0ee93d27d9
-
SSDEEP
12288:gCpyvXFPTfnCvX66h/NYJ9nDW6FApNg3gZqdDUtOuBiMc/j6KRVrxn7Nl4+GtlrL:dk9P7nCvX6MNYLIbgYJ3chra+GbrL
Static task
static1
Behavioral task
behavioral1
Sample
df999d74bf1052d031b84164e5029508528bb76feb7ec14caa6b92abd129f8a2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
df999d74bf1052d031b84164e5029508528bb76feb7ec14caa6b92abd129f8a2.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
df999d74bf1052d031b84164e5029508528bb76feb7ec14caa6b92abd129f8a2
-
Size
840KB
-
MD5
024ffc0a906b6ef8618e02c6349b1e61
-
SHA1
eebb32abf9151f35345869181eb8ffb88f21fabe
-
SHA256
df999d74bf1052d031b84164e5029508528bb76feb7ec14caa6b92abd129f8a2
-
SHA512
00982b9809900bb2cc05592c5d03608c43823bab0f377766b476e248c0ff2716041fab3ae7c4c1a9d6527e0e483078207c15e47ec7c7fa0579372c0ee93d27d9
-
SSDEEP
12288:gCpyvXFPTfnCvX66h/NYJ9nDW6FApNg3gZqdDUtOuBiMc/j6KRVrxn7Nl4+GtlrL:dk9P7nCvX6MNYLIbgYJ3chra+GbrL
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Suspicious use of SetThreadContext
-