Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0bbfe4a93ccda69d3aa428db0e590b6227afb7b913945f19d729c41900f97d3c
-
Size
183KB
-
Sample
221107-w12ccabga5
-
MD5
0fc54212e276e7b20d020ee246330a6a
-
SHA1
91aefc8cc86674a9a05a9ae27d0d6a8b8934c4b0
-
SHA256
0bbfe4a93ccda69d3aa428db0e590b6227afb7b913945f19d729c41900f97d3c
-
SHA512
97457f2e160845f22230ffe12905744beabc990cf85165a466b298e85ef732cc22299dd7cd379c25bef30d83ad1760e011eac072030580aa029a59e193b59733
-
SSDEEP
3072:obpDCw1p3vmLvsZIaVwiwDcIbDHDCm/DEcdwvz:gDCwfG1bnxLEc6vz
Static task
static1
Behavioral task
behavioral1
Sample
0bbfe4a93ccda69d3aa428db0e590b6227afb7b913945f19d729c41900f97d3c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0bbfe4a93ccda69d3aa428db0e590b6227afb7b913945f19d729c41900f97d3c.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
0bbfe4a93ccda69d3aa428db0e590b6227afb7b913945f19d729c41900f97d3c
-
Size
183KB
-
MD5
0fc54212e276e7b20d020ee246330a6a
-
SHA1
91aefc8cc86674a9a05a9ae27d0d6a8b8934c4b0
-
SHA256
0bbfe4a93ccda69d3aa428db0e590b6227afb7b913945f19d729c41900f97d3c
-
SHA512
97457f2e160845f22230ffe12905744beabc990cf85165a466b298e85ef732cc22299dd7cd379c25bef30d83ad1760e011eac072030580aa029a59e193b59733
-
SSDEEP
3072:obpDCw1p3vmLvsZIaVwiwDcIbDHDCm/DEcdwvz:gDCwfG1bnxLEc6vz
Score10/10-
Modifies visibility of file extensions in Explorer
-
Modifies visiblity of hidden/system files in Explorer
-
Adds policy Run key to start application
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-