Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
faca173e0078b91c99daf6e9c396f6faf86f513653a9ad95b5df408ddfa5ba7b
-
Size
192KB
-
Sample
221106-sdnwysaebl
-
MD5
2c8c4e02ca84a41d0d69c3904d9153ca
-
SHA1
5ce7efa5085930f42fc4e1a784d27ef74aca0fa6
-
SHA256
faca173e0078b91c99daf6e9c396f6faf86f513653a9ad95b5df408ddfa5ba7b
-
SHA512
05351ecded8186289906419b4c270ae43fcfbc77fe877c7cca4e6b4a50f188e9c9ae10a7b9172fcfed7f2460f2c12fbc270d85e6b5bad529c4f4cb7f4b925b48
-
SSDEEP
1536:h1HABQruHlTWPRi4iti93MH9iV6MRfWzzp3BHReQbIYL2XoPLJB514R9/dJqi/7:D2QraTMRi4itiSHXzp3uYTPLJOhD
Static task
static1
Behavioral task
behavioral1
Sample
faca173e0078b91c99daf6e9c396f6faf86f513653a9ad95b5df408ddfa5ba7b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
faca173e0078b91c99daf6e9c396f6faf86f513653a9ad95b5df408ddfa5ba7b.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
faca173e0078b91c99daf6e9c396f6faf86f513653a9ad95b5df408ddfa5ba7b
-
Size
192KB
-
MD5
2c8c4e02ca84a41d0d69c3904d9153ca
-
SHA1
5ce7efa5085930f42fc4e1a784d27ef74aca0fa6
-
SHA256
faca173e0078b91c99daf6e9c396f6faf86f513653a9ad95b5df408ddfa5ba7b
-
SHA512
05351ecded8186289906419b4c270ae43fcfbc77fe877c7cca4e6b4a50f188e9c9ae10a7b9172fcfed7f2460f2c12fbc270d85e6b5bad529c4f4cb7f4b925b48
-
SSDEEP
1536:h1HABQruHlTWPRi4iti93MH9iV6MRfWzzp3BHReQbIYL2XoPLJB514R9/dJqi/7:D2QraTMRi4itiSHXzp3uYTPLJOhD
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-