Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
52e8e2163c3918de5cb183abe3be134e11d83436d239e78e571fa9c198973fec
-
Size
307KB
-
Sample
221107-et5yhsaefq
-
MD5
0eaf291e0565a86af393bc576ebf0140
-
SHA1
78ca77d73e696c08c75d0a3ca3d43833f95fbf25
-
SHA256
52e8e2163c3918de5cb183abe3be134e11d83436d239e78e571fa9c198973fec
-
SHA512
1adea0d508fe2c2c2bc793907241467d80644d58cdda0da6269e32148f5f94fff19834a03f59f79ac8f21565acd0e861b4c5a4fe20526a4a584980381fe2ab61
-
SSDEEP
3072:0ulG96P/KdN8HdvkXfIIIIIIIIIIIIIIIIIIIIIIIIIIIIxJIIIIIIIIIIIIIIIS:02Hd8XzKedQBRZFeE7BUBBb9l
Static task
static1
Behavioral task
behavioral1
Sample
52e8e2163c3918de5cb183abe3be134e11d83436d239e78e571fa9c198973fec.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
52e8e2163c3918de5cb183abe3be134e11d83436d239e78e571fa9c198973fec.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
52e8e2163c3918de5cb183abe3be134e11d83436d239e78e571fa9c198973fec
-
Size
307KB
-
MD5
0eaf291e0565a86af393bc576ebf0140
-
SHA1
78ca77d73e696c08c75d0a3ca3d43833f95fbf25
-
SHA256
52e8e2163c3918de5cb183abe3be134e11d83436d239e78e571fa9c198973fec
-
SHA512
1adea0d508fe2c2c2bc793907241467d80644d58cdda0da6269e32148f5f94fff19834a03f59f79ac8f21565acd0e861b4c5a4fe20526a4a584980381fe2ab61
-
SSDEEP
3072:0ulG96P/KdN8HdvkXfIIIIIIIIIIIIIIIIIIIIIIIIIIIIxJIIIIIIIIIIIIIIIS:02Hd8XzKedQBRZFeE7BUBBb9l
Score8/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-