Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
cf0f6a60ac2c37799b02f26581cc92b2c346bfcdd757d2b459b969ea0e76867a
-
Size
42KB
-
Sample
221203-h5tw6saa8x
-
MD5
c6b81c7fb7d688711923a3774432f42d
-
SHA1
a4df01899ea43820b1661c57175019dfd6e602a3
-
SHA256
cf0f6a60ac2c37799b02f26581cc92b2c346bfcdd757d2b459b969ea0e76867a
-
SHA512
9f6f830745ff0d1125d94ac54ed8e0851660ff37142798706c13af6aec854e2e5590d2e5749f01ea629867a506b896bb63ce8fc9fc4cab12a6154b6bf07961a1
-
SSDEEP
768:uBUaZmvRRaO52tjS+YC5tZvx0HRVzJ1gFqDhgpVmcLek/c3Lqyu9usvSKvQkv:uBc6GC5bpMMuCuCek/c3LqbEWvQkv
Static task
static1
Behavioral task
behavioral1
Sample
cf0f6a60ac2c37799b02f26581cc92b2c346bfcdd757d2b459b969ea0e76867a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf0f6a60ac2c37799b02f26581cc92b2c346bfcdd757d2b459b969ea0e76867a.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
cf0f6a60ac2c37799b02f26581cc92b2c346bfcdd757d2b459b969ea0e76867a
-
Size
42KB
-
MD5
c6b81c7fb7d688711923a3774432f42d
-
SHA1
a4df01899ea43820b1661c57175019dfd6e602a3
-
SHA256
cf0f6a60ac2c37799b02f26581cc92b2c346bfcdd757d2b459b969ea0e76867a
-
SHA512
9f6f830745ff0d1125d94ac54ed8e0851660ff37142798706c13af6aec854e2e5590d2e5749f01ea629867a506b896bb63ce8fc9fc4cab12a6154b6bf07961a1
-
SSDEEP
768:uBUaZmvRRaO52tjS+YC5tZvx0HRVzJ1gFqDhgpVmcLek/c3Lqyu9usvSKvQkv:uBc6GC5bpMMuCuCek/c3LqbEWvQkv
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Drops file in System32 directory
-