Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1e91764f12fe4f3f71f0fa500ee3353c7734886ce34672e7e0f67b590db01904
-
Size
20KB
-
Sample
221012-rgyd5aege7
-
MD5
65e20fe33e32e5bbfce06725da9f1390
-
SHA1
7a8e41de13760f158edac9045d6cf64036ecafea
-
SHA256
1e91764f12fe4f3f71f0fa500ee3353c7734886ce34672e7e0f67b590db01904
-
SHA512
4f6c9758364541dfd362c69424c0b9242ddf4137a474615a3648100588b9127931eb5b302697d22f30189c0960757932f3d5cad164f73f346ff5dcf2541b33f7
-
SSDEEP
192:4/bROG+bO5r+C+isnpHfB7FhO8C0lzWvI4QwFt9V+jqCNa5KDJBaV:4L+q5r+PpHfXhUkKvI4QwjQNa5KDJq
Static task
static1
Behavioral task
behavioral1
Sample
1e91764f12fe4f3f71f0fa500ee3353c7734886ce34672e7e0f67b590db01904.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1e91764f12fe4f3f71f0fa500ee3353c7734886ce34672e7e0f67b590db01904.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
1e91764f12fe4f3f71f0fa500ee3353c7734886ce34672e7e0f67b590db01904
-
Size
20KB
-
MD5
65e20fe33e32e5bbfce06725da9f1390
-
SHA1
7a8e41de13760f158edac9045d6cf64036ecafea
-
SHA256
1e91764f12fe4f3f71f0fa500ee3353c7734886ce34672e7e0f67b590db01904
-
SHA512
4f6c9758364541dfd362c69424c0b9242ddf4137a474615a3648100588b9127931eb5b302697d22f30189c0960757932f3d5cad164f73f346ff5dcf2541b33f7
-
SSDEEP
192:4/bROG+bO5r+C+isnpHfB7FhO8C0lzWvI4QwFt9V+jqCNa5KDJBaV:4L+q5r+PpHfXhUkKvI4QwjQNa5KDJq
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-