Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Set-Up.exe
-
Size
54.7MB
-
Sample
221228-yeazdaee2v
-
MD5
333bba364d4d009ae856418f4d4facbc
-
SHA1
24cbf0dec314e1658133485a1913239a54bb7891
-
SHA256
c2e6a132106f2c7ac254447dbd160c9d1d7acd06dd16a6d7d2100c5602fc8f72
-
SHA512
ffd82dad6afc35be55c39c659a5328d9ddcc958d3dd46a2c509ae733f1206ed6a16b8f382e7c0536222e01c25928fea85d2f47f7b5f845bf59d9bec93f75b421
-
SSDEEP
1572864:L6zmuyS1xkPeXU25Vw8IuEd0QhF/H3kpN:L6zmuykxkRG2du80Vz
Static task
static1
Behavioral task
behavioral1
Sample
Set-Up.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Set-Up.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
Set-Up.exe
-
Size
54.7MB
-
MD5
333bba364d4d009ae856418f4d4facbc
-
SHA1
24cbf0dec314e1658133485a1913239a54bb7891
-
SHA256
c2e6a132106f2c7ac254447dbd160c9d1d7acd06dd16a6d7d2100c5602fc8f72
-
SHA512
ffd82dad6afc35be55c39c659a5328d9ddcc958d3dd46a2c509ae733f1206ed6a16b8f382e7c0536222e01c25928fea85d2f47f7b5f845bf59d9bec93f75b421
-
SSDEEP
1572864:L6zmuyS1xkPeXU25Vw8IuEd0QhF/H3kpN:L6zmuykxkRG2du80Vz
-
Modifies system executable filetype association
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Registers COM server for autorun
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-