Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bc3f97e08fc70c5e7663cdcc380bcf7ae0a2b81e5cd6b9907f5f7a8f49cdb86e
-
Size
356KB
-
Sample
221205-jbbzyagg88
-
MD5
56bea14a8aa030c2833064841b1e49c4
-
SHA1
89dc8a1e36b5b0c42b08b7bdf82a0a0ccd5eb35d
-
SHA256
bc3f97e08fc70c5e7663cdcc380bcf7ae0a2b81e5cd6b9907f5f7a8f49cdb86e
-
SHA512
654ee9568acae59601b6880b2a0c34460ab7934a808b621567f79f1500dcec531852916d308ecce7c70aada1b6a1b2a6eafd26c7836a2ca90cfb528d3b068fe7
-
SSDEEP
6144:TNXJz6ZQw9FsL57G2/+C+7VXfhSoSWmTh7dnc4z4Q/IueNfn1g5Tzz:ZZzQps7G2/j+BX+W8JnX0buehK5/z
Static task
static1
Behavioral task
behavioral1
Sample
bc3f97e08fc70c5e7663cdcc380bcf7ae0a2b81e5cd6b9907f5f7a8f49cdb86e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc3f97e08fc70c5e7663cdcc380bcf7ae0a2b81e5cd6b9907f5f7a8f49cdb86e.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
bc3f97e08fc70c5e7663cdcc380bcf7ae0a2b81e5cd6b9907f5f7a8f49cdb86e
-
Size
356KB
-
MD5
56bea14a8aa030c2833064841b1e49c4
-
SHA1
89dc8a1e36b5b0c42b08b7bdf82a0a0ccd5eb35d
-
SHA256
bc3f97e08fc70c5e7663cdcc380bcf7ae0a2b81e5cd6b9907f5f7a8f49cdb86e
-
SHA512
654ee9568acae59601b6880b2a0c34460ab7934a808b621567f79f1500dcec531852916d308ecce7c70aada1b6a1b2a6eafd26c7836a2ca90cfb528d3b068fe7
-
SSDEEP
6144:TNXJz6ZQw9FsL57G2/+C+7VXfhSoSWmTh7dnc4z4Q/IueNfn1g5Tzz:ZZzQps7G2/j+BX+W8JnX0buehK5/z
Score8/10-
Adds policy Run key to start application
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-