Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Order specification.r11.rar
-
Size
732KB
-
Sample
230202-phr8dsab61
-
MD5
7ed80e2f37b2e12b922e31851f41f1ed
-
SHA1
1d3e442d3fe740f6d006eff4bb7b3abaa4c21e7e
-
SHA256
d89509155d34dc8896fbf452372913ba12d9cc2cd3ca683e1fb64ede9f8fa532
-
SHA512
d2115a50b54611b8a4b46165c61ec32e634ed85e17c26359f425f15073d23f02790d0b6fccfedb29d344010bce82b6fa52ce838ca4163842bed44b7fe730dd68
-
SSDEEP
12288:bj1is9tkXQytmXfBAhpgInQAUj39TiAIUAB4ULvWS3uviI7wUzzYoKGGsFCOxK4J:Q02XAKMI7Ydi0ovWVv5k/0FC8K4bB5pf
Static task
static1
Behavioral task
behavioral1
Sample
Order specification.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Order specification.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
Order specification.exe
-
Size
911KB
-
MD5
6e4618e85f1366a3a526496f6537af89
-
SHA1
b1b1c0191b8b0043828ba04bfb91b5f41903459a
-
SHA256
85f9e2436c4b4743d0d509dfafeaba63bc46848a31053ffb00d35987fade8fda
-
SHA512
bf02ad607b2e778d5a8dff8321d7f906cb749e0f3f3e29c780bbb74bd713a01bbcf7b7c01b79da09727220d11cb0c2d2ef5ad274d883cba73bca9bb799860b79
-
SSDEEP
24576:Nrg6F0xMiBlOMp8vj/Vt4Uz8nTTgIdqG4yPa:3Wielf8vjdtBzakIm
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-