Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c156a1640742b4dff1b084e66c33fde8234a9eadd68e75a6c7f54b411af0ab19
-
Size
80KB
-
Sample
221129-dzf1xaee8y
-
MD5
c5acbe75fc88475610ade31fa594a71b
-
SHA1
664b8032ba52aa926ba8f01a32dcf50fc1079df6
-
SHA256
c156a1640742b4dff1b084e66c33fde8234a9eadd68e75a6c7f54b411af0ab19
-
SHA512
393be8ef508808d3738bc9a09ac531a1432b1078259b3d982bc4fe6ac4e1e6c720251b7da2a5059b64510309f8cabfe3aadf30baec9ea77889baa740bb450f12
-
SSDEEP
768:E4wqbVmf0fDUop1AShqG9jy1R2g7VnxPPB4qHfA5pcZdFveLuRQ1H2GBVI6Z:J4f8DRCST9XUZHfAUZ7yuRQ11VI6Z
Static task
static1
Behavioral task
behavioral1
Sample
c156a1640742b4dff1b084e66c33fde8234a9eadd68e75a6c7f54b411af0ab19.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c156a1640742b4dff1b084e66c33fde8234a9eadd68e75a6c7f54b411af0ab19.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
c156a1640742b4dff1b084e66c33fde8234a9eadd68e75a6c7f54b411af0ab19
-
Size
80KB
-
MD5
c5acbe75fc88475610ade31fa594a71b
-
SHA1
664b8032ba52aa926ba8f01a32dcf50fc1079df6
-
SHA256
c156a1640742b4dff1b084e66c33fde8234a9eadd68e75a6c7f54b411af0ab19
-
SHA512
393be8ef508808d3738bc9a09ac531a1432b1078259b3d982bc4fe6ac4e1e6c720251b7da2a5059b64510309f8cabfe3aadf30baec9ea77889baa740bb450f12
-
SSDEEP
768:E4wqbVmf0fDUop1AShqG9jy1R2g7VnxPPB4qHfA5pcZdFveLuRQ1H2GBVI6Z:J4f8DRCST9XUZHfAUZ7yuRQ11VI6Z
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-