Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
da7dc83f591219b19070a3a4cd3497d832664ded84d7bebfdbe52a2ecc6c32ee
-
Size
512KB
-
Sample
221128-hpg8fahf4s
-
MD5
dc313d1d27c29d55f308ca107ddef453
-
SHA1
bbbd02659936854af1b642fd2d459c4bdca59d23
-
SHA256
da7dc83f591219b19070a3a4cd3497d832664ded84d7bebfdbe52a2ecc6c32ee
-
SHA512
efcdfcb7277bd1bb52551f4eb259b8874670e222f267d0621c0d2e2db113fdf149f00f83d64a9d858c93f91221133dc928ed9e11b919fb4e788a8c4f49682b75
-
SSDEEP
12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4d:0+h9OY70z+warul3E4d
Static task
static1
Behavioral task
behavioral1
Sample
da7dc83f591219b19070a3a4cd3497d832664ded84d7bebfdbe52a2ecc6c32ee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
da7dc83f591219b19070a3a4cd3497d832664ded84d7bebfdbe52a2ecc6c32ee.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
da7dc83f591219b19070a3a4cd3497d832664ded84d7bebfdbe52a2ecc6c32ee
-
Size
512KB
-
MD5
dc313d1d27c29d55f308ca107ddef453
-
SHA1
bbbd02659936854af1b642fd2d459c4bdca59d23
-
SHA256
da7dc83f591219b19070a3a4cd3497d832664ded84d7bebfdbe52a2ecc6c32ee
-
SHA512
efcdfcb7277bd1bb52551f4eb259b8874670e222f267d0621c0d2e2db113fdf149f00f83d64a9d858c93f91221133dc928ed9e11b919fb4e788a8c4f49682b75
-
SSDEEP
12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4d:0+h9OY70z+warul3E4d
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-