Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
5b04c8ea01f3ddca4852932183f29c9f9045f1e9f691a5ac3c31477be75e44ed
-
Size
60KB
-
Sample
221128-dxwzcabd29
-
MD5
00b867cca854b8d60b612a43966c2290
-
SHA1
5a7cf6ad96ada971f8797c2124b906ca649d195c
-
SHA256
5b04c8ea01f3ddca4852932183f29c9f9045f1e9f691a5ac3c31477be75e44ed
-
SHA512
a6b7463bb974854efcd6b7b7418f0e1a78f0c5a5502d782c38ac12343764cb195dc56b0b2dd1d1c2d1982c63bceec14e2d4c64a4587cd1765c5ab46102104e81
-
SSDEEP
768:2Xxx1BUd8aiRssHH2D2n/z/D0lbdfs3OfKDHGqHg6WB8:2X9raifn2a/Dxg6WB8
Static task
static1
Behavioral task
behavioral1
Sample
5b04c8ea01f3ddca4852932183f29c9f9045f1e9f691a5ac3c31477be75e44ed.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5b04c8ea01f3ddca4852932183f29c9f9045f1e9f691a5ac3c31477be75e44ed.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
5b04c8ea01f3ddca4852932183f29c9f9045f1e9f691a5ac3c31477be75e44ed
-
Size
60KB
-
MD5
00b867cca854b8d60b612a43966c2290
-
SHA1
5a7cf6ad96ada971f8797c2124b906ca649d195c
-
SHA256
5b04c8ea01f3ddca4852932183f29c9f9045f1e9f691a5ac3c31477be75e44ed
-
SHA512
a6b7463bb974854efcd6b7b7418f0e1a78f0c5a5502d782c38ac12343764cb195dc56b0b2dd1d1c2d1982c63bceec14e2d4c64a4587cd1765c5ab46102104e81
-
SSDEEP
768:2Xxx1BUd8aiRssHH2D2n/z/D0lbdfs3OfKDHGqHg6WB8:2X9raifn2a/Dxg6WB8
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-