Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e9cfd9c3fa2c0245f9fe8d005af91400773c90e98af4cd3dc8bb4134f61a5391
-
Size
43KB
-
Sample
221020-tpwllscggk
-
MD5
80a0ec46d9a3ccf934a093fb9a0aea50
-
SHA1
d6c9af634ad4fc99254aa1a93905a107d9c39e7e
-
SHA256
e9cfd9c3fa2c0245f9fe8d005af91400773c90e98af4cd3dc8bb4134f61a5391
-
SHA512
7f092123026db26c344016c38c98f858e44b4062c380fd49106d5e5f637ea13dd868e62b5aa4f4c14e3c233993951f6a344f378ac4376c930f18bcdfd0e79deb
-
SSDEEP
768:TCiVL8OfeVLmSQ4CzsrLW92Ta2MP5k1a6HAjHeWqvtW1ZXTcZ1Lu3NvY41c0MHCT:3czC2LlDQ6iZyy3hY4uHCCrk
Static task
static1
Behavioral task
behavioral1
Sample
e9cfd9c3fa2c0245f9fe8d005af91400773c90e98af4cd3dc8bb4134f61a5391.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e9cfd9c3fa2c0245f9fe8d005af91400773c90e98af4cd3dc8bb4134f61a5391.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
e9cfd9c3fa2c0245f9fe8d005af91400773c90e98af4cd3dc8bb4134f61a5391
-
Size
43KB
-
MD5
80a0ec46d9a3ccf934a093fb9a0aea50
-
SHA1
d6c9af634ad4fc99254aa1a93905a107d9c39e7e
-
SHA256
e9cfd9c3fa2c0245f9fe8d005af91400773c90e98af4cd3dc8bb4134f61a5391
-
SHA512
7f092123026db26c344016c38c98f858e44b4062c380fd49106d5e5f637ea13dd868e62b5aa4f4c14e3c233993951f6a344f378ac4376c930f18bcdfd0e79deb
-
SSDEEP
768:TCiVL8OfeVLmSQ4CzsrLW92Ta2MP5k1a6HAjHeWqvtW1ZXTcZ1Lu3NvY41c0MHCT:3czC2LlDQ6iZyy3hY4uHCCrk
Score8/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-