Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3c97d987f71e3973b14760567d839a0f437239e82d548239deef7c5e9f531fc9
-
Size
100KB
-
Sample
221011-sxg8hsbgb6
-
MD5
0818e43f4521e69ced3efef4abb3d7d0
-
SHA1
b05960aecc167b2d8ceb3afcfa2a51ee41d4022c
-
SHA256
3c97d987f71e3973b14760567d839a0f437239e82d548239deef7c5e9f531fc9
-
SHA512
38db68c40feebe8bb83dfcac920dff0bcb342b0d76d12c585aa410f2063e980e295c2ba5f31d57e54fa6bad07b3a842501748d91586c4aa561f7ab00d616ffb2
-
SSDEEP
3072:e47excGxFLPkH9SnbZDa8rjaegPwvuK6gD4HcyvAYTT:e+eGYtPk0Z+PegIWccz
Static task
static1
Behavioral task
behavioral1
Sample
PHOTO-DEVOCHKA.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
PHOTO-DEVOCHKA.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
PHOTO-DEVOCHKA.exe
-
Size
151KB
-
MD5
f3eb24ff9098c4525c31b2b041dc91c8
-
SHA1
941064dbc83fe92a2e088f0514edda294d63981a
-
SHA256
f77442dbb007b1378b5636d6e0d7fd2c52caf5dacc17aa1ff6db65c825b4ab63
-
SHA512
229b4e9b50312b9c621438d840e46e28c5d4111341e37750dd56b6b25761c3b48850ec908ce516d9962b024bd64a0d3b776c23ab58c91f10fb7f1846f3376ec6
-
SSDEEP
3072:lBAp5XhKpN4eOyVTGfhEClj8jTk+0hiDR7ibWyvAYT1:AbXE9OiTGfhEClq9pR7iHV
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-