Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e306d22a41874c9e866d8d4d61b5d9cdf44362354060bea5d7b412ab81345d45
-
Size
140KB
-
Sample
221129-vesmmsbb5w
-
MD5
50bead83e8f0f59c754333c346ddc533
-
SHA1
28b4e8740e7d3b3294ef07d122b3d924ffc159d3
-
SHA256
e306d22a41874c9e866d8d4d61b5d9cdf44362354060bea5d7b412ab81345d45
-
SHA512
ae28877ac35f0ba3651fa9a0ff3c46486afc2c7f80eba8ec7c80ceae5afea1d3790cde5256c2c8db96c34962045ba8e2f65a1964e736de6bad18f2629fd474fd
-
SSDEEP
1536:Mu04r4SNyLV4Ji2+6wl4fAsyCsJ2AyJOSfNifNuzyW14oQ/hKeXsjEFiKuhu:fiCi2+6CXfCZAyJH1i1uzD4oQZiEkfhu
Static task
static1
Behavioral task
behavioral1
Sample
e306d22a41874c9e866d8d4d61b5d9cdf44362354060bea5d7b412ab81345d45.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e306d22a41874c9e866d8d4d61b5d9cdf44362354060bea5d7b412ab81345d45.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
e306d22a41874c9e866d8d4d61b5d9cdf44362354060bea5d7b412ab81345d45
-
Size
140KB
-
MD5
50bead83e8f0f59c754333c346ddc533
-
SHA1
28b4e8740e7d3b3294ef07d122b3d924ffc159d3
-
SHA256
e306d22a41874c9e866d8d4d61b5d9cdf44362354060bea5d7b412ab81345d45
-
SHA512
ae28877ac35f0ba3651fa9a0ff3c46486afc2c7f80eba8ec7c80ceae5afea1d3790cde5256c2c8db96c34962045ba8e2f65a1964e736de6bad18f2629fd474fd
-
SSDEEP
1536:Mu04r4SNyLV4Ji2+6wl4fAsyCsJ2AyJOSfNifNuzyW14oQ/hKeXsjEFiKuhu:fiCi2+6CXfCZAyJH1i1uzD4oQZiEkfhu
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-