Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
OfficeSetup.exe
-
Size
7.0MB
-
Sample
230323-r9xcjaac8s
-
MD5
07adcb1942238af49ffddb1bfebdc0b4
-
SHA1
5a69972af991ef7b7f44ae1ea1d93ef45e19a74f
-
SHA256
4a5c3925f2b5a6650af073e180f17357ccaa7c19aeef9e3f4fd6486a17a1772b
-
SHA512
08f06af0b75077822215204fc32fc60667fccb49b74ec76f549655f7cb9668dd109b6ae6da0feae053b9b5693dc1982d80857492b771641827b1f761b8fe6f65
-
SSDEEP
196608:cqq9dY2LVcIF20bI0fg4oMOLz3dNH+tJTwcuis:cqeY2ZF7I0oTMOHCjTwcLs
Malware Config
Targets
-
-
Target
OfficeSetup.exe
-
Size
7.0MB
-
MD5
07adcb1942238af49ffddb1bfebdc0b4
-
SHA1
5a69972af991ef7b7f44ae1ea1d93ef45e19a74f
-
SHA256
4a5c3925f2b5a6650af073e180f17357ccaa7c19aeef9e3f4fd6486a17a1772b
-
SHA512
08f06af0b75077822215204fc32fc60667fccb49b74ec76f549655f7cb9668dd109b6ae6da0feae053b9b5693dc1982d80857492b771641827b1f761b8fe6f65
-
SSDEEP
196608:cqq9dY2LVcIF20bI0fg4oMOLz3dNH+tJTwcuis:cqeY2ZF7I0oTMOHCjTwcLs
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
-