Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ddb9fbe1466215b7fe544f6cdb700c36afbf8c79c76b9b0e27cf16efaa71c5ec
-
Size
33KB
-
Sample
221204-rk585sbb6t
-
MD5
72d83b61847efab6d09999506a4d7a18
-
SHA1
408dcace71fed3d6ec7c8f628ec84cbdebd7e108
-
SHA256
ddb9fbe1466215b7fe544f6cdb700c36afbf8c79c76b9b0e27cf16efaa71c5ec
-
SHA512
5d7b86aa56f2c1491bff40bb8e8c0180727f65ecf86785a25fc03cfd33cd655364743bc322357072eeca9e25ec8832466291172339dfd16376fcc92550044e33
-
SSDEEP
768:BDtodNkDnNQqajgp5yWmeF6qQ4wRbx6nV:BR9DnNQqacJmeF7gbx6nV
Static task
static1
Behavioral task
behavioral1
Sample
ddb9fbe1466215b7fe544f6cdb700c36afbf8c79c76b9b0e27cf16efaa71c5ec.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ddb9fbe1466215b7fe544f6cdb700c36afbf8c79c76b9b0e27cf16efaa71c5ec.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
ddb9fbe1466215b7fe544f6cdb700c36afbf8c79c76b9b0e27cf16efaa71c5ec
-
Size
33KB
-
MD5
72d83b61847efab6d09999506a4d7a18
-
SHA1
408dcace71fed3d6ec7c8f628ec84cbdebd7e108
-
SHA256
ddb9fbe1466215b7fe544f6cdb700c36afbf8c79c76b9b0e27cf16efaa71c5ec
-
SHA512
5d7b86aa56f2c1491bff40bb8e8c0180727f65ecf86785a25fc03cfd33cd655364743bc322357072eeca9e25ec8832466291172339dfd16376fcc92550044e33
-
SSDEEP
768:BDtodNkDnNQqajgp5yWmeF6qQ4wRbx6nV:BR9DnNQqacJmeF7gbx6nV
Score8/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-