Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
461f80a7835f6660005e184ceae6df4fa24807836ea4c355182e312131c326c5
-
Size
2.6MB
-
Sample
221203-wvydhadc96
-
MD5
8547c878787692870f6cb73ac772c4e6
-
SHA1
ae44b0581d5c3bee317873cbf0e23044d45eac62
-
SHA256
461f80a7835f6660005e184ceae6df4fa24807836ea4c355182e312131c326c5
-
SHA512
3c0528e914aa2c54bc2dc1f6c9ad71e10eb18c228be8ac77eabbfb71beaf277f4df8582fa491ab53631c20d220b644054646a2a8cc18073c2c5aea293617dd86
-
SSDEEP
49152:G+pw97HhY6Hk009aeWyGitBdxPBJjXlapqwnLTWmOpQw1VW5qDASDTu5SZbNUI3L:GaQB3EVaLitBd14ptLTKMARyYkIL
Static task
static1
Behavioral task
behavioral1
Sample
461f80a7835f6660005e184ceae6df4fa24807836ea4c355182e312131c326c5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
461f80a7835f6660005e184ceae6df4fa24807836ea4c355182e312131c326c5.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
461f80a7835f6660005e184ceae6df4fa24807836ea4c355182e312131c326c5
-
Size
2.6MB
-
MD5
8547c878787692870f6cb73ac772c4e6
-
SHA1
ae44b0581d5c3bee317873cbf0e23044d45eac62
-
SHA256
461f80a7835f6660005e184ceae6df4fa24807836ea4c355182e312131c326c5
-
SHA512
3c0528e914aa2c54bc2dc1f6c9ad71e10eb18c228be8ac77eabbfb71beaf277f4df8582fa491ab53631c20d220b644054646a2a8cc18073c2c5aea293617dd86
-
SSDEEP
49152:G+pw97HhY6Hk009aeWyGitBdxPBJjXlapqwnLTWmOpQw1VW5qDASDTu5SZbNUI3L:GaQB3EVaLitBd14ptLTKMARyYkIL
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-