Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bf055949c7a2ed392792b2a2b8e46c034d0636564f5fa7dbfda94f235533ecbc
-
Size
624KB
-
Sample
221127-k6mwcsee77
-
MD5
4dd55b9bfef37ff24244b77e7be0d5c2
-
SHA1
56e18311e084ade4dc52761527eb25e8a56ed357
-
SHA256
bf055949c7a2ed392792b2a2b8e46c034d0636564f5fa7dbfda94f235533ecbc
-
SHA512
73d12057d7147304dc2bb8a09522463f72f98d63df7e57f81023bc5fe5c7237845c59059d388328414a2bf7e423f289bc62bbcc756fa8cf25557b2836cb46bde
-
SSDEEP
12288:p93rW92itxpUGx1I/mCEUaQ9b0WF+cf6vDbRI4LBvhRybnlf61Y+Q:3W92kUGx/s9bSvDbRlJ0bn81Y+Q
Static task
static1
Behavioral task
behavioral1
Sample
bf055949c7a2ed392792b2a2b8e46c034d0636564f5fa7dbfda94f235533ecbc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf055949c7a2ed392792b2a2b8e46c034d0636564f5fa7dbfda94f235533ecbc.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
bf055949c7a2ed392792b2a2b8e46c034d0636564f5fa7dbfda94f235533ecbc
-
Size
624KB
-
MD5
4dd55b9bfef37ff24244b77e7be0d5c2
-
SHA1
56e18311e084ade4dc52761527eb25e8a56ed357
-
SHA256
bf055949c7a2ed392792b2a2b8e46c034d0636564f5fa7dbfda94f235533ecbc
-
SHA512
73d12057d7147304dc2bb8a09522463f72f98d63df7e57f81023bc5fe5c7237845c59059d388328414a2bf7e423f289bc62bbcc756fa8cf25557b2836cb46bde
-
SSDEEP
12288:p93rW92itxpUGx1I/mCEUaQ9b0WF+cf6vDbRI4LBvhRybnlf61Y+Q:3W92kUGx/s9bSvDbRlJ0bn81Y+Q
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-