Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c26c7071083d117b51f4a73fab2f8697.exe
-
Size
33.9MB
-
Sample
230106-vp9nxada2v
-
MD5
c26c7071083d117b51f4a73fab2f8697
-
SHA1
9168db21aac302514e9491101063acfabcdbec2e
-
SHA256
7e744136336ec22c55586bcd75d19897ecc78a58eebe836ad0147a7861bc32f3
-
SHA512
29e2a3f9174852eea6fe6ffe09a8b380eb138420c568f307089406baedcc5cec4c07f64cf60673d0e54fae3bc3724125b050209e8873dc77f0b08b2a933424e7
-
SSDEEP
786432:R7OnqnMHIl8tC//mjepEvxfsqwhEfJO3WvmBqz:R6nqwg8tKuTxfEh6xmo
Static task
static1
Behavioral task
behavioral1
Sample
c26c7071083d117b51f4a73fab2f8697.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c26c7071083d117b51f4a73fab2f8697.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
http://135.181.123.26/sccp32.dll
Extracted
http://135.181.123.26/rundll32.bat
Targets
-
-
Target
c26c7071083d117b51f4a73fab2f8697.exe
-
Size
33.9MB
-
MD5
c26c7071083d117b51f4a73fab2f8697
-
SHA1
9168db21aac302514e9491101063acfabcdbec2e
-
SHA256
7e744136336ec22c55586bcd75d19897ecc78a58eebe836ad0147a7861bc32f3
-
SHA512
29e2a3f9174852eea6fe6ffe09a8b380eb138420c568f307089406baedcc5cec4c07f64cf60673d0e54fae3bc3724125b050209e8873dc77f0b08b2a933424e7
-
SSDEEP
786432:R7OnqnMHIl8tC//mjepEvxfsqwhEfJO3WvmBqz:R6nqwg8tKuTxfEh6xmo
Score10/10-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-