Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ff8f763d9b332f6603c658fcf1d11ab7621e284d12c4dfc7b2fdde2b11d1805c
-
Size
512KB
-
Sample
221127-3b7ldsff93
-
MD5
c57d837d06c5dc8ff9080181c5008f87
-
SHA1
3d434e24753098b74445e473cce0fe82459ce60b
-
SHA256
ff8f763d9b332f6603c658fcf1d11ab7621e284d12c4dfc7b2fdde2b11d1805c
-
SHA512
a9719b29b1372eb5160b995d4b89f63f9c63161eddc67b88a151f0192cc6cb75f06d4ad3ee2758358874d366eadcf4380cb739d9e793d3b5073fee2f971871fd
-
SSDEEP
12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4g:0+h9OY70z+warul3E4g
Static task
static1
Behavioral task
behavioral1
Sample
ff8f763d9b332f6603c658fcf1d11ab7621e284d12c4dfc7b2fdde2b11d1805c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff8f763d9b332f6603c658fcf1d11ab7621e284d12c4dfc7b2fdde2b11d1805c.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
ff8f763d9b332f6603c658fcf1d11ab7621e284d12c4dfc7b2fdde2b11d1805c
-
Size
512KB
-
MD5
c57d837d06c5dc8ff9080181c5008f87
-
SHA1
3d434e24753098b74445e473cce0fe82459ce60b
-
SHA256
ff8f763d9b332f6603c658fcf1d11ab7621e284d12c4dfc7b2fdde2b11d1805c
-
SHA512
a9719b29b1372eb5160b995d4b89f63f9c63161eddc67b88a151f0192cc6cb75f06d4ad3ee2758358874d366eadcf4380cb739d9e793d3b5073fee2f971871fd
-
SSDEEP
12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4g:0+h9OY70z+warul3E4g
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-