Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
28ddf18816e7cd08a8da145a4c74ca59332e847ccef2d97086544da22f0b32aa
-
Size
124KB
-
Sample
221203-txps2afe92
-
MD5
39b9051bb19d09a8ff0c3fae38a43892
-
SHA1
dec29dacffdb9dfafad92122105c81309949a56c
-
SHA256
28ddf18816e7cd08a8da145a4c74ca59332e847ccef2d97086544da22f0b32aa
-
SHA512
ee44d42a439a3f2d2086a679b296a02f5295e19aa7c8c88447ea7d1590ab7f704c8f39a2f11763fb5cb05e5ae1c3f0248cc0745ef94121085874182736368729
-
SSDEEP
1536:AkE/hwRvuBxeDtMYHa27J14ltxporZ45i8NeG0h/E:xE/hwRvkeV6gJ1uCt45OM
Static task
static1
Behavioral task
behavioral1
Sample
28ddf18816e7cd08a8da145a4c74ca59332e847ccef2d97086544da22f0b32aa.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
28ddf18816e7cd08a8da145a4c74ca59332e847ccef2d97086544da22f0b32aa.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
28ddf18816e7cd08a8da145a4c74ca59332e847ccef2d97086544da22f0b32aa
-
Size
124KB
-
MD5
39b9051bb19d09a8ff0c3fae38a43892
-
SHA1
dec29dacffdb9dfafad92122105c81309949a56c
-
SHA256
28ddf18816e7cd08a8da145a4c74ca59332e847ccef2d97086544da22f0b32aa
-
SHA512
ee44d42a439a3f2d2086a679b296a02f5295e19aa7c8c88447ea7d1590ab7f704c8f39a2f11763fb5cb05e5ae1c3f0248cc0745ef94121085874182736368729
-
SSDEEP
1536:AkE/hwRvuBxeDtMYHa27J14ltxporZ45i8NeG0h/E:xE/hwRvkeV6gJ1uCt45OM
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-