Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9bf2f997ca1077d7820d7e7d53622f694f45fd19ee934fb91fc772221e12eb4a
-
Size
62KB
-
Sample
221203-akjayaca3w
-
MD5
0a797adc3f086673bfceb8254c3912d4
-
SHA1
0d3a2367d5625f30ac6deca128c339b6b5903776
-
SHA256
9bf2f997ca1077d7820d7e7d53622f694f45fd19ee934fb91fc772221e12eb4a
-
SHA512
7378ff873274e4bc1ad5032ecc30f9743e0266bac95c956b938195bc8d67ee8afe628f4f8d7874bb397e885933ade81b00846e899bf272d31ba3334ee185d8ea
-
SSDEEP
1536:bpg6nW9+kdTx87Iwterf9KZezMv5oITjhyb5lZT:bpg6W5kRMf9BY5ooS
Static task
static1
Behavioral task
behavioral1
Sample
9bf2f997ca1077d7820d7e7d53622f694f45fd19ee934fb91fc772221e12eb4a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9bf2f997ca1077d7820d7e7d53622f694f45fd19ee934fb91fc772221e12eb4a.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
9bf2f997ca1077d7820d7e7d53622f694f45fd19ee934fb91fc772221e12eb4a
-
Size
62KB
-
MD5
0a797adc3f086673bfceb8254c3912d4
-
SHA1
0d3a2367d5625f30ac6deca128c339b6b5903776
-
SHA256
9bf2f997ca1077d7820d7e7d53622f694f45fd19ee934fb91fc772221e12eb4a
-
SHA512
7378ff873274e4bc1ad5032ecc30f9743e0266bac95c956b938195bc8d67ee8afe628f4f8d7874bb397e885933ade81b00846e899bf272d31ba3334ee185d8ea
-
SSDEEP
1536:bpg6nW9+kdTx87Iwterf9KZezMv5oITjhyb5lZT:bpg6W5kRMf9BY5ooS
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Modifies WinLogon
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-