Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bc49b40c3190571bc483de68d16b9788ce30fc96b2d18cb350a681d221f0bd75
-
Size
180KB
-
Sample
221011-bztkwshecm
-
MD5
5fb26e6d27cb6e152cac74b218d01490
-
SHA1
7c8ff28874801d1557415a3cd647530d1ab3b799
-
SHA256
bc49b40c3190571bc483de68d16b9788ce30fc96b2d18cb350a681d221f0bd75
-
SHA512
87eacb5a7338a7f6e8c1f2a2eb32061d58e6806edb229a8edb0ebfa1b7afa0151c68626bddfbfedf4ad288f9916245be52e7b3998fddd8a14ced14eba1a5232e
-
SSDEEP
3072:oRHNSIcEGROnFPgPmCXMNKiqMdMZZZZWMkIJk:igEtEMNIMdHY
Static task
static1
Behavioral task
behavioral1
Sample
bc49b40c3190571bc483de68d16b9788ce30fc96b2d18cb350a681d221f0bd75.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc49b40c3190571bc483de68d16b9788ce30fc96b2d18cb350a681d221f0bd75.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
bc49b40c3190571bc483de68d16b9788ce30fc96b2d18cb350a681d221f0bd75
-
Size
180KB
-
MD5
5fb26e6d27cb6e152cac74b218d01490
-
SHA1
7c8ff28874801d1557415a3cd647530d1ab3b799
-
SHA256
bc49b40c3190571bc483de68d16b9788ce30fc96b2d18cb350a681d221f0bd75
-
SHA512
87eacb5a7338a7f6e8c1f2a2eb32061d58e6806edb229a8edb0ebfa1b7afa0151c68626bddfbfedf4ad288f9916245be52e7b3998fddd8a14ced14eba1a5232e
-
SSDEEP
3072:oRHNSIcEGROnFPgPmCXMNKiqMdMZZZZWMkIJk:igEtEMNIMdHY
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-