Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d1d0c407e435bb4ad062d1e054e4704b0b0fa9134675a293e07b05b38884c3a9
-
Size
361KB
-
Sample
221201-vp68saad88
-
MD5
33c9a90e00b9aaf7e2786410a6e92288
-
SHA1
24505621e144d7186e22f3295bf0c40158027037
-
SHA256
d1d0c407e435bb4ad062d1e054e4704b0b0fa9134675a293e07b05b38884c3a9
-
SHA512
72a029923ddec5a57bb49a4b239bb417fe9d66caaa6f7c80659122741454b01466a46a4edda31ad9185113cf2214c920f589f0657e14f2c3ec708f2359dd1c5c
-
SSDEEP
1536:5ldTg3KN9+rxmCWP+9URpKxQxk2Y0792HXfo0zW4nfeff6Wr:jdUaN9+rxh9cpKxQxk2Y0792HXfrf7k
Static task
static1
Behavioral task
behavioral1
Sample
d1d0c407e435bb4ad062d1e054e4704b0b0fa9134675a293e07b05b38884c3a9.exe
Resource
win7-20221111-en
Malware Config
Targets
-
-
Target
d1d0c407e435bb4ad062d1e054e4704b0b0fa9134675a293e07b05b38884c3a9
-
Size
361KB
-
MD5
33c9a90e00b9aaf7e2786410a6e92288
-
SHA1
24505621e144d7186e22f3295bf0c40158027037
-
SHA256
d1d0c407e435bb4ad062d1e054e4704b0b0fa9134675a293e07b05b38884c3a9
-
SHA512
72a029923ddec5a57bb49a4b239bb417fe9d66caaa6f7c80659122741454b01466a46a4edda31ad9185113cf2214c920f589f0657e14f2c3ec708f2359dd1c5c
-
SSDEEP
1536:5ldTg3KN9+rxmCWP+9URpKxQxk2Y0792HXfo0zW4nfeff6Wr:jdUaN9+rxh9cpKxQxk2Y0792HXfrf7k
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-