Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
cbeb8a1dc9c1cc99182866d178ecaea8.bin
-
Size
189KB
-
Sample
230505-yb4saaca7w
-
MD5
cbeb8a1dc9c1cc99182866d178ecaea8
-
SHA1
4fed98767f06ef15b165c4baa69ac9adfbcfc794
-
SHA256
f94a87a6b2201c05a4222db550ce2ea96991165ee8b3c25af7bfeb5a8bbd8d51
-
SHA512
0b46422897e1e0302fc29e3a7625fea0b929eefc4ca506616bc7456596e8520bfb047aaa73baf304991bddb6dfca6bf93673b5738555ad40e00f8ee6d60d80b5
-
SSDEEP
3072:TxoZBytUbHRMDHJA8rXlm+TjeVfsHSz26jk:FoZB+Uj8X4+6sHSi6jk
Static task
static1
Behavioral task
behavioral1
Sample
cbeb8a1dc9c1cc99182866d178ecaea8.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
cbeb8a1dc9c1cc99182866d178ecaea8.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
cbeb8a1dc9c1cc99182866d178ecaea8.bin
-
Size
189KB
-
MD5
cbeb8a1dc9c1cc99182866d178ecaea8
-
SHA1
4fed98767f06ef15b165c4baa69ac9adfbcfc794
-
SHA256
f94a87a6b2201c05a4222db550ce2ea96991165ee8b3c25af7bfeb5a8bbd8d51
-
SHA512
0b46422897e1e0302fc29e3a7625fea0b929eefc4ca506616bc7456596e8520bfb047aaa73baf304991bddb6dfca6bf93673b5738555ad40e00f8ee6d60d80b5
-
SSDEEP
3072:TxoZBytUbHRMDHJA8rXlm+TjeVfsHSz26jk:FoZB+Uj8X4+6sHSi6jk
Score10/10-
Modifies visibility of file extensions in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-