Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Setup_Win_31-12-2022_01-50-16.msi
-
Size
772KB
-
Sample
221231-ccn8bscb9s
-
MD5
4509edb7effdfc57e288bb7b23fa0180
-
SHA1
edd9910a9b2774e5a9a36ca096d299b092556016
-
SHA256
c0a063352598eae28f226207503d864a06f5490497b074a9390927793ea16bfd
-
SHA512
c6a321a42f6235e89b9c256ccdc2d697437baa07574c4da12e65a8c225a007f5da7a6e9b8e14d88a27de19d7b78b5375e3938c5be9054fa62f645fe2420afda0
-
SSDEEP
12288:TwHL0DpsMX/wg4ZqU0UmmhtNOOdpxoPcrDnS34y9RPF8L:0HL0tvwglMtNjjoGS3bRPF8L
Static task
static1
Behavioral task
behavioral1
Sample
Setup_Win_31-12-2022_01-50-16.msi
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Setup_Win_31-12-2022_01-50-16.msi
Resource
win10v2004-20221111-en
Malware Config
Extracted
icedid
2957048208
whothitheka.com
Targets
-
-
Target
Setup_Win_31-12-2022_01-50-16.msi
-
Size
772KB
-
MD5
4509edb7effdfc57e288bb7b23fa0180
-
SHA1
edd9910a9b2774e5a9a36ca096d299b092556016
-
SHA256
c0a063352598eae28f226207503d864a06f5490497b074a9390927793ea16bfd
-
SHA512
c6a321a42f6235e89b9c256ccdc2d697437baa07574c4da12e65a8c225a007f5da7a6e9b8e14d88a27de19d7b78b5375e3938c5be9054fa62f645fe2420afda0
-
SSDEEP
12288:TwHL0DpsMX/wg4ZqU0UmmhtNOOdpxoPcrDnS34y9RPF8L:0HL0tvwglMtNjjoGS3bRPF8L
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-