Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file.exe
-
Size
357KB
-
Sample
230210-mv42lsca86
-
MD5
88d3588e92f5c5f99a2e036252a9d281
-
SHA1
1ed1ce7b4cb75db17e90efd41349754113648fe0
-
SHA256
92afdac37111654925657288e25740c7291896b233c012e41ecd23e81b53dee4
-
SHA512
0b3e93cd59bb5fc8fe6fffe11c35e34fb0bb77bf1af10ce199c53715c09385b5f5b046b625bb6c1f4a0f7109030d5968fc128346de682d22827893e03d1c6131
-
SSDEEP
3072:0wHqb7eKdaMaTK8CyR6sb9SuqXZW8Va5tWGYkK/FBRA9nf6Nh382UUf/:pH6tauXsb96p/a5LVK/XR2nfWhsA/
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
tofsee
svartalfheim.top
jotunheim.name
Targets
-
-
Target
file.exe
-
Size
357KB
-
MD5
88d3588e92f5c5f99a2e036252a9d281
-
SHA1
1ed1ce7b4cb75db17e90efd41349754113648fe0
-
SHA256
92afdac37111654925657288e25740c7291896b233c012e41ecd23e81b53dee4
-
SHA512
0b3e93cd59bb5fc8fe6fffe11c35e34fb0bb77bf1af10ce199c53715c09385b5f5b046b625bb6c1f4a0f7109030d5968fc128346de682d22827893e03d1c6131
-
SSDEEP
3072:0wHqb7eKdaMaTK8CyR6sb9SuqXZW8Va5tWGYkK/FBRA9nf6Nh382UUf/:pH6tauXsb96p/a5LVK/XR2nfWhsA/
Score10/10-
Creates new service(s)
-
Modifies Windows Firewall
-
Sets service image path in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-