Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f6abdc048f7de832e68d830fefc8d015409b4701fc6c8b3e8eef7ae9b566679f
-
Size
512KB
-
Sample
221128-he714sgh8w
-
MD5
0d9cfaa2caff3eadc983c77ea75e4cdb
-
SHA1
2e9d68670a45398b9f3d6a3e7b2af40ce02bcb5b
-
SHA256
f6abdc048f7de832e68d830fefc8d015409b4701fc6c8b3e8eef7ae9b566679f
-
SHA512
866b43f347fbdf333f1f036175046bc1459cf17e8e38a94f5b2fc14a5d41772ec925660de5b28f960343d064e8e9d81c131ec356b060ce2621e35d3b4ecaca5e
-
SSDEEP
12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4d:0+h9OY70z+warul3E4d
Static task
static1
Behavioral task
behavioral1
Sample
f6abdc048f7de832e68d830fefc8d015409b4701fc6c8b3e8eef7ae9b566679f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f6abdc048f7de832e68d830fefc8d015409b4701fc6c8b3e8eef7ae9b566679f.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
f6abdc048f7de832e68d830fefc8d015409b4701fc6c8b3e8eef7ae9b566679f
-
Size
512KB
-
MD5
0d9cfaa2caff3eadc983c77ea75e4cdb
-
SHA1
2e9d68670a45398b9f3d6a3e7b2af40ce02bcb5b
-
SHA256
f6abdc048f7de832e68d830fefc8d015409b4701fc6c8b3e8eef7ae9b566679f
-
SHA512
866b43f347fbdf333f1f036175046bc1459cf17e8e38a94f5b2fc14a5d41772ec925660de5b28f960343d064e8e9d81c131ec356b060ce2621e35d3b4ecaca5e
-
SSDEEP
12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4d:0+h9OY70z+warul3E4d
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-