Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file.exe
-
Size
396KB
-
Sample
221007-m6t1sacdfk
-
MD5
ba9783b9a49d73e4c499b416394c3a68
-
SHA1
8b3e1811acc2f100b034de9cb79f4a3e57378fde
-
SHA256
f3231a039f3898bbff37d1cbe3c7c60bf1701d05eab14f69cb0b8aa40e420f79
-
SHA512
93b59e6393c3f6ca8cbd876230f26c1dd7e6ec4d4f97acb6fa2853c5596ce5b295d78cb5038a39c82c56c7a12fdb4ae6e122aa08ae56bf55d5651ac28d3f9516
-
SSDEEP
6144:PemQju+KCWSg9ZszB5KyHqkAL1+4Ed/xSgE2BuzbgwuMWwVfs:P0qwLOZWuyHqJ+57SQBunnO
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Malware Config
Extracted
nymaim
208.67.104.97
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
396KB
-
MD5
ba9783b9a49d73e4c499b416394c3a68
-
SHA1
8b3e1811acc2f100b034de9cb79f4a3e57378fde
-
SHA256
f3231a039f3898bbff37d1cbe3c7c60bf1701d05eab14f69cb0b8aa40e420f79
-
SHA512
93b59e6393c3f6ca8cbd876230f26c1dd7e6ec4d4f97acb6fa2853c5596ce5b295d78cb5038a39c82c56c7a12fdb4ae6e122aa08ae56bf55d5651ac28d3f9516
-
SSDEEP
6144:PemQju+KCWSg9ZszB5KyHqkAL1+4Ed/xSgE2BuzbgwuMWwVfs:P0qwLOZWuyHqJ+57SQBunnO
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-