Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
afef641091619698172d09d9231c66b719094983d40aba5f201ebfd71c515a8e
-
Size
116KB
-
Sample
221205-xk3qxafe56
-
MD5
2d47afc819ed604fd21e2cc6be139240
-
SHA1
5329718bbb168032b959d81b819210341e493290
-
SHA256
afef641091619698172d09d9231c66b719094983d40aba5f201ebfd71c515a8e
-
SHA512
f1b7296311fc1eb38b70ac1a896cf980aa1139d23aa95582a823a945e3ad6d94d2513b8872d32b419f98cc05d48664858bce3046da374e5ffc0cdd482cc33f6c
-
SSDEEP
1536:Gqpxoj++C7k8Kw6KBOIW4Z8HO1Zwt0f4HeDUEdMOPy9sbgN2wo7JaS1:FpZ+ykfIr1ZNDUEdTwQL
Static task
static1
Behavioral task
behavioral1
Sample
afef641091619698172d09d9231c66b719094983d40aba5f201ebfd71c515a8e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
afef641091619698172d09d9231c66b719094983d40aba5f201ebfd71c515a8e.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
afef641091619698172d09d9231c66b719094983d40aba5f201ebfd71c515a8e
-
Size
116KB
-
MD5
2d47afc819ed604fd21e2cc6be139240
-
SHA1
5329718bbb168032b959d81b819210341e493290
-
SHA256
afef641091619698172d09d9231c66b719094983d40aba5f201ebfd71c515a8e
-
SHA512
f1b7296311fc1eb38b70ac1a896cf980aa1139d23aa95582a823a945e3ad6d94d2513b8872d32b419f98cc05d48664858bce3046da374e5ffc0cdd482cc33f6c
-
SSDEEP
1536:Gqpxoj++C7k8Kw6KBOIW4Z8HO1Zwt0f4HeDUEdMOPy9sbgN2wo7JaS1:FpZ+ykfIr1ZNDUEdTwQL
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-