Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
23ed589b5e30005891dc957cad1efb9df5587512d820b0ed6d9c9cf958a39987
-
Size
746KB
-
Sample
221121-n3a9yach4t
-
MD5
1a1edddace03ddef321c864e150785d1
-
SHA1
fc36161ff998afd44fd15f82c94a48a60ff6a801
-
SHA256
23ed589b5e30005891dc957cad1efb9df5587512d820b0ed6d9c9cf958a39987
-
SHA512
2840795eb0961c89db8c87d316cb43a2f94467452868bbfd9ccf06e9d18cf3e6f42eb59eafbbcaaff7962131b66e5e3d74e7df7ac336210e7dd41b1f0956d516
-
SSDEEP
6144:a+nglw9ayQv3ahvyn/PU7O0KXgTTSj9ltfgIg+oaAhIXbO9qsWSM:rjS3Yvyn/0TkLFYsqTM
Static task
static1
Behavioral task
behavioral1
Sample
23ed589b5e30005891dc957cad1efb9df5587512d820b0ed6d9c9cf958a39987.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
23ed589b5e30005891dc957cad1efb9df5587512d820b0ed6d9c9cf958a39987.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
23ed589b5e30005891dc957cad1efb9df5587512d820b0ed6d9c9cf958a39987
-
Size
746KB
-
MD5
1a1edddace03ddef321c864e150785d1
-
SHA1
fc36161ff998afd44fd15f82c94a48a60ff6a801
-
SHA256
23ed589b5e30005891dc957cad1efb9df5587512d820b0ed6d9c9cf958a39987
-
SHA512
2840795eb0961c89db8c87d316cb43a2f94467452868bbfd9ccf06e9d18cf3e6f42eb59eafbbcaaff7962131b66e5e3d74e7df7ac336210e7dd41b1f0956d516
-
SSDEEP
6144:a+nglw9ayQv3ahvyn/PU7O0KXgTTSj9ltfgIg+oaAhIXbO9qsWSM:rjS3Yvyn/0TkLFYsqTM
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-