Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4b4f04f5923ffb6008f9046a20373fd4be81b1a45de8235830e4ddd2d9c5a99e
-
Size
192KB
-
Sample
221030-ykgdcahcgl
-
MD5
a184a7b2cb20fd894e7b2c47fce2989c
-
SHA1
5a23438166d4720b7380a52a23e89ae584a935d9
-
SHA256
4b4f04f5923ffb6008f9046a20373fd4be81b1a45de8235830e4ddd2d9c5a99e
-
SHA512
b0f48cbdfda6ea7c14ee7bcac699e4fdf03431fc942da692680aa14ed3b4ceb2a1c4682a0d8cf8ec2c9f158de5d1e6aaf3d8a71eae40947f2e8f8906c36f944b
-
SSDEEP
3072:DOm0VJOSokrwInQrLS4kZxPQtmnU9Ri7TJAc1BkHy8IA9aVsV2Bq:Km0VJOvI6S4QQtOU9ROp8/V28
Static task
static1
Behavioral task
behavioral1
Sample
4b4f04f5923ffb6008f9046a20373fd4be81b1a45de8235830e4ddd2d9c5a99e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4b4f04f5923ffb6008f9046a20373fd4be81b1a45de8235830e4ddd2d9c5a99e.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
4b4f04f5923ffb6008f9046a20373fd4be81b1a45de8235830e4ddd2d9c5a99e
-
Size
192KB
-
MD5
a184a7b2cb20fd894e7b2c47fce2989c
-
SHA1
5a23438166d4720b7380a52a23e89ae584a935d9
-
SHA256
4b4f04f5923ffb6008f9046a20373fd4be81b1a45de8235830e4ddd2d9c5a99e
-
SHA512
b0f48cbdfda6ea7c14ee7bcac699e4fdf03431fc942da692680aa14ed3b4ceb2a1c4682a0d8cf8ec2c9f158de5d1e6aaf3d8a71eae40947f2e8f8906c36f944b
-
SSDEEP
3072:DOm0VJOSokrwInQrLS4kZxPQtmnU9Ri7TJAc1BkHy8IA9aVsV2Bq:Km0VJOvI6S4QQtOU9ROp8/V28
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-