Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
tmp
-
Size
375KB
-
Sample
230420-m9fybsbe2t
-
MD5
8c1fdfac9ebd282be0a85164120445ae
-
SHA1
249647954c4d28aea0f517c6831102430cd9cd3f
-
SHA256
340c89d0d81447bbe9855d625048e84b7226beb0bc9c4cbb7cc54891449d785a
-
SHA512
d18cae71203ca7bf8e2ab85559932a0896a139237f4732fa382aac80f3cedf514d22dd17107173ae3706eb65b1dbe35fa98d4d772dd5a13979993b0624f22a3d
-
SSDEEP
6144:PYa6Blr2Uv5LIYxmevmwwYztxy4yY0n4Av1ZYQ9yra/EpCsMjACt+wPp6g7m1Q/r:PYzlCqY7wjx04sZ1ycV8Q+wPtCC
Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
tmp
-
Size
375KB
-
MD5
8c1fdfac9ebd282be0a85164120445ae
-
SHA1
249647954c4d28aea0f517c6831102430cd9cd3f
-
SHA256
340c89d0d81447bbe9855d625048e84b7226beb0bc9c4cbb7cc54891449d785a
-
SHA512
d18cae71203ca7bf8e2ab85559932a0896a139237f4732fa382aac80f3cedf514d22dd17107173ae3706eb65b1dbe35fa98d4d772dd5a13979993b0624f22a3d
-
SSDEEP
6144:PYa6Blr2Uv5LIYxmevmwwYztxy4yY0n4Av1ZYQ9yra/EpCsMjACt+wPp6g7m1Q/r:PYzlCqY7wjx04sZ1ycV8Q+wPtCC
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-