Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
28d3f731dfabefe0623cdc5dd85c2159bddf2630a763ecec01708f99ca288f51
-
Size
278KB
-
Sample
221019-stkt8sdhfr
-
MD5
91f0885857ebb94c1b36060318d102b0
-
SHA1
b2da4f2a90843790b7071b73dde366d4814b37d6
-
SHA256
28d3f731dfabefe0623cdc5dd85c2159bddf2630a763ecec01708f99ca288f51
-
SHA512
ded140663d46a04dea6adb969306ab58b5a9c4818160d3db638fed9e3f11a1e45f71b4bddc82e76020fcf25296221b47c0afc39dc40561c5f24f41cfb7eff251
-
SSDEEP
6144:nTSeRSXbcqdvL7N9uDnqTdnLAJebd7RCeebfzqEN:ZaAqdvNwDnm4bfzqEN
Static task
static1
Behavioral task
behavioral1
Sample
28d3f731dfabefe0623cdc5dd85c2159bddf2630a763ecec01708f99ca288f51.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
28d3f731dfabefe0623cdc5dd85c2159bddf2630a763ecec01708f99ca288f51.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
28d3f731dfabefe0623cdc5dd85c2159bddf2630a763ecec01708f99ca288f51
-
Size
278KB
-
MD5
91f0885857ebb94c1b36060318d102b0
-
SHA1
b2da4f2a90843790b7071b73dde366d4814b37d6
-
SHA256
28d3f731dfabefe0623cdc5dd85c2159bddf2630a763ecec01708f99ca288f51
-
SHA512
ded140663d46a04dea6adb969306ab58b5a9c4818160d3db638fed9e3f11a1e45f71b4bddc82e76020fcf25296221b47c0afc39dc40561c5f24f41cfb7eff251
-
SSDEEP
6144:nTSeRSXbcqdvL7N9uDnqTdnLAJebd7RCeebfzqEN:ZaAqdvNwDnm4bfzqEN
Score10/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-