Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bf73b303785f81f5a9b591ff73e915ba2434362c25cdb3d69ab7938751e2b7a0
-
Size
40KB
-
Sample
221201-w3r7fsbd6w
-
MD5
3977442beb038b57d50aaf11fcc5f589
-
SHA1
8274cf3ce45c8973d292927d7dc57e9e2aa11a5c
-
SHA256
bf73b303785f81f5a9b591ff73e915ba2434362c25cdb3d69ab7938751e2b7a0
-
SHA512
6422fbefb1a94ee7dcba25ec401df262d7fd7cb884bc9371b7e30447859df9c0b641caa938a96009864a6cd954336567ea8db0736f7a233c17d37f6d359e9818
-
SSDEEP
384:LlqPDZD1zHET9F8Esd8vmccAbpbNDgITHRN4EddWjRHbG3HQLqVIaO/pPHkRFNcx:L8ZD1DIGddEDbvHN4wkQ3wLMisC+JL
Static task
static1
Behavioral task
behavioral1
Sample
bf73b303785f81f5a9b591ff73e915ba2434362c25cdb3d69ab7938751e2b7a0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf73b303785f81f5a9b591ff73e915ba2434362c25cdb3d69ab7938751e2b7a0.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
bf73b303785f81f5a9b591ff73e915ba2434362c25cdb3d69ab7938751e2b7a0
-
Size
40KB
-
MD5
3977442beb038b57d50aaf11fcc5f589
-
SHA1
8274cf3ce45c8973d292927d7dc57e9e2aa11a5c
-
SHA256
bf73b303785f81f5a9b591ff73e915ba2434362c25cdb3d69ab7938751e2b7a0
-
SHA512
6422fbefb1a94ee7dcba25ec401df262d7fd7cb884bc9371b7e30447859df9c0b641caa938a96009864a6cd954336567ea8db0736f7a233c17d37f6d359e9818
-
SSDEEP
384:LlqPDZD1zHET9F8Esd8vmccAbpbNDgITHRN4EddWjRHbG3HQLqVIaO/pPHkRFNcx:L8ZD1DIGddEDbvHN4wkQ3wLMisC+JL
Score8/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-