Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a9c96b1703cb39684207a675bf3af295faed1f8d27eb51b312c9cb19b57cbc98
-
Size
1.1MB
-
Sample
221203-bjkm2seg9w
-
MD5
753beed5c8ef36a4f9974bb5ed154c2e
-
SHA1
b88685813f147997e9a39f7771bf4efb8bbbf257
-
SHA256
a9c96b1703cb39684207a675bf3af295faed1f8d27eb51b312c9cb19b57cbc98
-
SHA512
081a5dab5f68aa18d56451d2e3e3011dc89087dd450e4b6617443577658a0985e3e21fd597e015c5c5c6aeebf7a8e38c2a04d3dbf292f4b46ddc49ab42bedcca
-
SSDEEP
24576:JkjHSN59ngsR+PEIzzamL1472ex/Fbl2DPpoUX:JuinF+sIHlDI5YDqu
Static task
static1
Behavioral task
behavioral1
Sample
a9c96b1703cb39684207a675bf3af295faed1f8d27eb51b312c9cb19b57cbc98.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9c96b1703cb39684207a675bf3af295faed1f8d27eb51b312c9cb19b57cbc98.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
a9c96b1703cb39684207a675bf3af295faed1f8d27eb51b312c9cb19b57cbc98
-
Size
1.1MB
-
MD5
753beed5c8ef36a4f9974bb5ed154c2e
-
SHA1
b88685813f147997e9a39f7771bf4efb8bbbf257
-
SHA256
a9c96b1703cb39684207a675bf3af295faed1f8d27eb51b312c9cb19b57cbc98
-
SHA512
081a5dab5f68aa18d56451d2e3e3011dc89087dd450e4b6617443577658a0985e3e21fd597e015c5c5c6aeebf7a8e38c2a04d3dbf292f4b46ddc49ab42bedcca
-
SSDEEP
24576:JkjHSN59ngsR+PEIzzamL1472ex/Fbl2DPpoUX:JuinF+sIHlDI5YDqu
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-