Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3c7d982471b041b1ba25def3ac74d478d083ba867e1ed7356375b7caa87d308d
-
Size
840KB
-
Sample
221020-2byg2shcd4
-
MD5
40244b155cf2aac338de3ce94f01747d
-
SHA1
b82cc85facaaffe12313fb7f28ee6b37d37f6d97
-
SHA256
3c7d982471b041b1ba25def3ac74d478d083ba867e1ed7356375b7caa87d308d
-
SHA512
301a5597e8b9c7660341c17b008911501fd6028de3c955b3a4cecd407b8bc09946b13cb804fd2a3939fd8df2dc0237784cca10ef111edf336208223ecbdf2353
-
SSDEEP
12288:7CpyvXFPTfnCvX66h/NYJ9nDW6FApNg3gZqdDUtOuBiMc/j6KRVrxn7Nl4+GtlrL:+k9P7nCvX6MNYLIbgYJ3chra+GbrL
Static task
static1
Behavioral task
behavioral1
Sample
3c7d982471b041b1ba25def3ac74d478d083ba867e1ed7356375b7caa87d308d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3c7d982471b041b1ba25def3ac74d478d083ba867e1ed7356375b7caa87d308d.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
3c7d982471b041b1ba25def3ac74d478d083ba867e1ed7356375b7caa87d308d
-
Size
840KB
-
MD5
40244b155cf2aac338de3ce94f01747d
-
SHA1
b82cc85facaaffe12313fb7f28ee6b37d37f6d97
-
SHA256
3c7d982471b041b1ba25def3ac74d478d083ba867e1ed7356375b7caa87d308d
-
SHA512
301a5597e8b9c7660341c17b008911501fd6028de3c955b3a4cecd407b8bc09946b13cb804fd2a3939fd8df2dc0237784cca10ef111edf336208223ecbdf2353
-
SSDEEP
12288:7CpyvXFPTfnCvX66h/NYJ9nDW6FApNg3gZqdDUtOuBiMc/j6KRVrxn7Nl4+GtlrL:+k9P7nCvX6MNYLIbgYJ3chra+GbrL
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Suspicious use of SetThreadContext
-