Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
03a4759d6259a0e544bbfca79d0f1a546097f1890e4e2a7e12d2f17c80cd6c6f
-
Size
80KB
-
Sample
221020-2ggrgshec7
-
MD5
2b7c00a4bc6d0d0889fd49a7739384c9
-
SHA1
d042cf35f1baed92599b13ce63b6cb99d1fe6738
-
SHA256
03a4759d6259a0e544bbfca79d0f1a546097f1890e4e2a7e12d2f17c80cd6c6f
-
SHA512
f8777c3a7d83b497cb3820d226a038c39a3fc9d5da4472aee96a4d48cac160ce7c11c36fe469902fd20517c5d7fc27b3c50a5c21a4f7433311204232c930f696
-
SSDEEP
1536:Iqm7Fi5jihZ0Y9s51p1xYtWghO6mC0BuIWX2QdCWH/fCVPJV4gWzAi7oXBtW30Ru:6I5jiDFs51p1xYtWghO6mC0BuIWX2Qd7
Static task
static1
Behavioral task
behavioral1
Sample
03a4759d6259a0e544bbfca79d0f1a546097f1890e4e2a7e12d2f17c80cd6c6f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
03a4759d6259a0e544bbfca79d0f1a546097f1890e4e2a7e12d2f17c80cd6c6f.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
03a4759d6259a0e544bbfca79d0f1a546097f1890e4e2a7e12d2f17c80cd6c6f
-
Size
80KB
-
MD5
2b7c00a4bc6d0d0889fd49a7739384c9
-
SHA1
d042cf35f1baed92599b13ce63b6cb99d1fe6738
-
SHA256
03a4759d6259a0e544bbfca79d0f1a546097f1890e4e2a7e12d2f17c80cd6c6f
-
SHA512
f8777c3a7d83b497cb3820d226a038c39a3fc9d5da4472aee96a4d48cac160ce7c11c36fe469902fd20517c5d7fc27b3c50a5c21a4f7433311204232c930f696
-
SSDEEP
1536:Iqm7Fi5jihZ0Y9s51p1xYtWghO6mC0BuIWX2QdCWH/fCVPJV4gWzAi7oXBtW30Ru:6I5jiDFs51p1xYtWghO6mC0BuIWX2Qd7
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-