Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c012f53dd959f7525def5990b132e55c73c5f288eb1cbeb75fe40451e50831dc
-
Size
192KB
-
Sample
221129-vnmsrabh7s
-
MD5
49a66d018b361cad503fb8c8a170ebd2
-
SHA1
c631df32bf1047b157648f3ec738633041f1016e
-
SHA256
c012f53dd959f7525def5990b132e55c73c5f288eb1cbeb75fe40451e50831dc
-
SHA512
1a34efeda1e7ddd1dac8595584d9896777ff15fd0ea4982ca5d93f8506578bba44d02f2a24a154a922ef46d0be4a76100e1695bce5b6d240adec3948d0d181a1
-
SSDEEP
3072:rtrZuCWv2JQcFBKBJy6apbuD2VMbj1hlUyw/1obo:rzBWvUFIJlapu2V21r/Y
Static task
static1
Behavioral task
behavioral1
Sample
c012f53dd959f7525def5990b132e55c73c5f288eb1cbeb75fe40451e50831dc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c012f53dd959f7525def5990b132e55c73c5f288eb1cbeb75fe40451e50831dc.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
c012f53dd959f7525def5990b132e55c73c5f288eb1cbeb75fe40451e50831dc
-
Size
192KB
-
MD5
49a66d018b361cad503fb8c8a170ebd2
-
SHA1
c631df32bf1047b157648f3ec738633041f1016e
-
SHA256
c012f53dd959f7525def5990b132e55c73c5f288eb1cbeb75fe40451e50831dc
-
SHA512
1a34efeda1e7ddd1dac8595584d9896777ff15fd0ea4982ca5d93f8506578bba44d02f2a24a154a922ef46d0be4a76100e1695bce5b6d240adec3948d0d181a1
-
SSDEEP
3072:rtrZuCWv2JQcFBKBJy6apbuD2VMbj1hlUyw/1obo:rzBWvUFIJlapu2V21r/Y
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-