Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9db66a3372237615c547bd64d25e7b8977cbe7ee78d78704bb06e6c83dbf6dce
-
Size
492KB
-
Sample
221129-gp86gsfb8t
-
MD5
81422d9300dc4b73043e21a7733fbe2d
-
SHA1
7be7cd5622831d9c252c1ec9c48ebaf737b8a654
-
SHA256
9db66a3372237615c547bd64d25e7b8977cbe7ee78d78704bb06e6c83dbf6dce
-
SHA512
94d0342404d99a3f230d19a1a6cce122ead5e1c2f8000d1d07d69981288952dbddc8043826a27437031bd51e27b1eb7ef8d2fafd72a803f8869918785696a357
-
SSDEEP
3072:0tNQKGSGtGSGOGOGlGln+VD/m8ClX0kUb+16H6b5p8I0yH/JN8HOWShM+L7aL7Ct:0sKbELf/MR/cWdi5pV/JNWOVhMO
Static task
static1
Behavioral task
behavioral1
Sample
9db66a3372237615c547bd64d25e7b8977cbe7ee78d78704bb06e6c83dbf6dce.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9db66a3372237615c547bd64d25e7b8977cbe7ee78d78704bb06e6c83dbf6dce.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
9db66a3372237615c547bd64d25e7b8977cbe7ee78d78704bb06e6c83dbf6dce
-
Size
492KB
-
MD5
81422d9300dc4b73043e21a7733fbe2d
-
SHA1
7be7cd5622831d9c252c1ec9c48ebaf737b8a654
-
SHA256
9db66a3372237615c547bd64d25e7b8977cbe7ee78d78704bb06e6c83dbf6dce
-
SHA512
94d0342404d99a3f230d19a1a6cce122ead5e1c2f8000d1d07d69981288952dbddc8043826a27437031bd51e27b1eb7ef8d2fafd72a803f8869918785696a357
-
SSDEEP
3072:0tNQKGSGtGSGOGOGlGln+VD/m8ClX0kUb+16H6b5p8I0yH/JN8HOWShM+L7aL7Ct:0sKbELf/MR/cWdi5pV/JNWOVhMO
Score10/10-
Modifies visibility of file extensions in Explorer
-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-