Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
513c51476f4751ced842d67e0dc948f06c0d4628a42a640fff109081cc01a6ef
-
Size
512KB
-
Sample
221127-yjr4fsdg57
-
MD5
a42efd9865cba944a2d7b1394df684a9
-
SHA1
01d77be807d94c0dd23dae4689ea32318a4ba367
-
SHA256
513c51476f4751ced842d67e0dc948f06c0d4628a42a640fff109081cc01a6ef
-
SHA512
a3a8a35bd409960e5b72b4b7f8977eddd0aa9cd1b506a85e2dbfbae2a32198e65139cf049807bd0db6bd787ba9887515164b88def33ba3fa892bdccb96cfe380
-
SSDEEP
12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4c:0+h9OY70z+warul3E4c
Static task
static1
Behavioral task
behavioral1
Sample
513c51476f4751ced842d67e0dc948f06c0d4628a42a640fff109081cc01a6ef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
513c51476f4751ced842d67e0dc948f06c0d4628a42a640fff109081cc01a6ef.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
513c51476f4751ced842d67e0dc948f06c0d4628a42a640fff109081cc01a6ef
-
Size
512KB
-
MD5
a42efd9865cba944a2d7b1394df684a9
-
SHA1
01d77be807d94c0dd23dae4689ea32318a4ba367
-
SHA256
513c51476f4751ced842d67e0dc948f06c0d4628a42a640fff109081cc01a6ef
-
SHA512
a3a8a35bd409960e5b72b4b7f8977eddd0aa9cd1b506a85e2dbfbae2a32198e65139cf049807bd0db6bd787ba9887515164b88def33ba3fa892bdccb96cfe380
-
SSDEEP
12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4c:0+h9OY70z+warul3E4c
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-