Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Setup - Extravi's ReShade-Preset.exe
-
Size
1.9MB
-
Sample
230103-b1jgbace6w
-
MD5
34d7a50686bff4cc31569af93d734561
-
SHA1
98c3b64a64ef7b608412f0bbbb1e606fda77e0b6
-
SHA256
e106dc57418b5286dac7ee1921920c7c6617c4480a6c983c274ab025ec31cc7b
-
SHA512
1874c502649cad7c61dd2261b12c6609780c554496ad233f0cdfb50280c4fe21753ccd8a3f73000a96f18b057a2971c7cd52f4ab852bfd3a0de6f38a3afe0cf3
-
SSDEEP
49152:3R6cGVgvztCtGe+sbLAChFbIzR7S0OzHl+vMTNTtC9:3RVGVYz4LXrzA77Oz40TRc9
Static task
static1
Behavioral task
behavioral1
Sample
Setup - Extravi's ReShade-Preset.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
Setup - Extravi's ReShade-Preset.exe
-
Size
1.9MB
-
MD5
34d7a50686bff4cc31569af93d734561
-
SHA1
98c3b64a64ef7b608412f0bbbb1e606fda77e0b6
-
SHA256
e106dc57418b5286dac7ee1921920c7c6617c4480a6c983c274ab025ec31cc7b
-
SHA512
1874c502649cad7c61dd2261b12c6609780c554496ad233f0cdfb50280c4fe21753ccd8a3f73000a96f18b057a2971c7cd52f4ab852bfd3a0de6f38a3afe0cf3
-
SSDEEP
49152:3R6cGVgvztCtGe+sbLAChFbIzR7S0OzHl+vMTNTtC9:3RVGVYz4LXrzA77Oz40TRc9
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-