Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4e9bf2ddffbcb10cbd64447226bde8a59fd17747328d6228c31ead2453e2a31a
-
Size
262KB
-
Sample
221127-s9fkfshf92
-
MD5
90d97f9c540727472af8d3357eb62a3b
-
SHA1
fb8909a7dbebd7a7f86b27810de6960fc22dbc68
-
SHA256
4e9bf2ddffbcb10cbd64447226bde8a59fd17747328d6228c31ead2453e2a31a
-
SHA512
fde88c8bbae3335a1663fcb824b48895388918ca37c2d3859f1ed75f78c0a8f4df97d82a8e6c81fa70c2d94fb8d752572b10c6b6104b73b36e5c33fafb02c89b
-
SSDEEP
6144:JsWppppppppppppppppppppppppppppppppppppppppppppTpppppppppppppppx:xppppppppppppppppppppppppppppppn
Malware Config
Targets
-
-
Target
4e9bf2ddffbcb10cbd64447226bde8a59fd17747328d6228c31ead2453e2a31a
-
Size
262KB
-
MD5
90d97f9c540727472af8d3357eb62a3b
-
SHA1
fb8909a7dbebd7a7f86b27810de6960fc22dbc68
-
SHA256
4e9bf2ddffbcb10cbd64447226bde8a59fd17747328d6228c31ead2453e2a31a
-
SHA512
fde88c8bbae3335a1663fcb824b48895388918ca37c2d3859f1ed75f78c0a8f4df97d82a8e6c81fa70c2d94fb8d752572b10c6b6104b73b36e5c33fafb02c89b
-
SSDEEP
6144:JsWppppppppppppppppppppppppppppppppppppppppppppTpppppppppppppppx:xppppppppppppppppppppppppppppppn
Score8/10-
Downloads MZ/PE file
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Registers COM server for autorun
-
Sets DLL path for service in the registry
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-