Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b47065616a00bab43ba35fac1b778f9437e9b3985ad25f5e1b12707992846493
-
Size
512KB
-
Sample
221128-ae7rcaeb3x
-
MD5
4f3487ecededd2f4089cd8bed80abb6a
-
SHA1
3af95fd1bd1a1a77636b31894ecefb7c6d31fedf
-
SHA256
b47065616a00bab43ba35fac1b778f9437e9b3985ad25f5e1b12707992846493
-
SHA512
29c84cdce6e79e564ab75bcdb7eb4c37739bc014c3d4e16c586f9e27e591a33fa84d72048eda817163f9de814cfb5311ff516c1438340c02b1c5f0505d7b2968
-
SSDEEP
12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4c:0+h9OY70z+warul3E4c
Static task
static1
Behavioral task
behavioral1
Sample
b47065616a00bab43ba35fac1b778f9437e9b3985ad25f5e1b12707992846493.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b47065616a00bab43ba35fac1b778f9437e9b3985ad25f5e1b12707992846493.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
b47065616a00bab43ba35fac1b778f9437e9b3985ad25f5e1b12707992846493
-
Size
512KB
-
MD5
4f3487ecededd2f4089cd8bed80abb6a
-
SHA1
3af95fd1bd1a1a77636b31894ecefb7c6d31fedf
-
SHA256
b47065616a00bab43ba35fac1b778f9437e9b3985ad25f5e1b12707992846493
-
SHA512
29c84cdce6e79e564ab75bcdb7eb4c37739bc014c3d4e16c586f9e27e591a33fa84d72048eda817163f9de814cfb5311ff516c1438340c02b1c5f0505d7b2968
-
SSDEEP
12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4c:0+h9OY70z+warul3E4c
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-