Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
984ae1615eeca88944358dad0c893f955298fe901a93417d422f1f97067c2781
-
Size
63KB
-
Sample
221129-ff96raff39
-
MD5
bd1ebf18f7f0ef1c309617f672ab8335
-
SHA1
739c9c16b2bb153ae5138a7318a58ad8ea261be1
-
SHA256
984ae1615eeca88944358dad0c893f955298fe901a93417d422f1f97067c2781
-
SHA512
5d27761802e455490f03d6d052feb69cdce1d5c80e25af6b987121fb5c0002b269f1ad1b38b7b7b40a31ff978457abda68129bacf32ede7fad6abb56d4bfa0c6
-
SSDEEP
1536:OrZtaewPBaF79KuUbYLAlBVOjEKHGkOqYtiHLl7ss:ODahPBarKpbqAjVOAiGklFLlss
Static task
static1
Behavioral task
behavioral1
Sample
984ae1615eeca88944358dad0c893f955298fe901a93417d422f1f97067c2781.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
984ae1615eeca88944358dad0c893f955298fe901a93417d422f1f97067c2781.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
984ae1615eeca88944358dad0c893f955298fe901a93417d422f1f97067c2781
-
Size
63KB
-
MD5
bd1ebf18f7f0ef1c309617f672ab8335
-
SHA1
739c9c16b2bb153ae5138a7318a58ad8ea261be1
-
SHA256
984ae1615eeca88944358dad0c893f955298fe901a93417d422f1f97067c2781
-
SHA512
5d27761802e455490f03d6d052feb69cdce1d5c80e25af6b987121fb5c0002b269f1ad1b38b7b7b40a31ff978457abda68129bacf32ede7fad6abb56d4bfa0c6
-
SSDEEP
1536:OrZtaewPBaF79KuUbYLAlBVOjEKHGkOqYtiHLl7ss:ODahPBarKpbqAjVOAiGklFLlss
Score10/10-
Modifies WinLogon for persistence
-
Modifies system executable filetype association
-
Modifies visibility of file extensions in Explorer
-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-