Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f98b668ceaa88e9b0fda3b7f81295f5cd4aace2dd92fbdfa42fb51d26b0b88cb
-
Size
144KB
-
Sample
221127-mjd12sac84
-
MD5
d2a4c19c8d54117fca3b77ae458c0e07
-
SHA1
fb22c2ba501afd6c56b309a48a09e8d08339eb10
-
SHA256
f98b668ceaa88e9b0fda3b7f81295f5cd4aace2dd92fbdfa42fb51d26b0b88cb
-
SHA512
49a2fefe520317368dc83c8199485c87dc6745f4601537a18a492fae5aee998acaca5df8e54e312d950379b4b4307d927b23d42bbde2f2d28869fbf1d255fbfa
-
SSDEEP
3072:CstajHKBvYXJLKLnNNx4yK1DdR2v1JR1M36bprWTrlZXA:CTq+4LNX01fi7G5TrjA
Malware Config
Targets
-
-
Target
f98b668ceaa88e9b0fda3b7f81295f5cd4aace2dd92fbdfa42fb51d26b0b88cb
-
Size
144KB
-
MD5
d2a4c19c8d54117fca3b77ae458c0e07
-
SHA1
fb22c2ba501afd6c56b309a48a09e8d08339eb10
-
SHA256
f98b668ceaa88e9b0fda3b7f81295f5cd4aace2dd92fbdfa42fb51d26b0b88cb
-
SHA512
49a2fefe520317368dc83c8199485c87dc6745f4601537a18a492fae5aee998acaca5df8e54e312d950379b4b4307d927b23d42bbde2f2d28869fbf1d255fbfa
-
SSDEEP
3072:CstajHKBvYXJLKLnNNx4yK1DdR2v1JR1M36bprWTrlZXA:CTq+4LNX01fi7G5TrjA
Score8/10-
Downloads MZ/PE file
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Registers COM server for autorun
-
Sets DLL path for service in the registry
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-