Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d34288be36729f88516878d0a153bddb88959be609f0d913114f9dbaa9701efb
-
Size
392KB
-
Sample
221030-tnw6rahec8
-
MD5
82805fe0c771d3d7660012d0e5d63060
-
SHA1
e762d3caf6d045e66f2d9ba5a2ce3bd65c0b6600
-
SHA256
d34288be36729f88516878d0a153bddb88959be609f0d913114f9dbaa9701efb
-
SHA512
aadc35efe7618be3c2b344063146091916223402ab75b824f1fc9520355c7292ab0e6f78fb25748e4b56199d0592e3f136806516a23cae3e1be41f326740c44d
-
SSDEEP
12288:tt8vVED3Bk0Mr9Vif7/F1hIIaYHuvAIS23:tt+gvMpVij/F1hV5HuvAId
Static task
static1
Behavioral task
behavioral1
Sample
d34288be36729f88516878d0a153bddb88959be609f0d913114f9dbaa9701efb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d34288be36729f88516878d0a153bddb88959be609f0d913114f9dbaa9701efb.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
d34288be36729f88516878d0a153bddb88959be609f0d913114f9dbaa9701efb
-
Size
392KB
-
MD5
82805fe0c771d3d7660012d0e5d63060
-
SHA1
e762d3caf6d045e66f2d9ba5a2ce3bd65c0b6600
-
SHA256
d34288be36729f88516878d0a153bddb88959be609f0d913114f9dbaa9701efb
-
SHA512
aadc35efe7618be3c2b344063146091916223402ab75b824f1fc9520355c7292ab0e6f78fb25748e4b56199d0592e3f136806516a23cae3e1be41f326740c44d
-
SSDEEP
12288:tt8vVED3Bk0Mr9Vif7/F1hIIaYHuvAIS23:tt+gvMpVij/F1hV5HuvAId
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-