Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
sample
-
Size
16KB
-
Sample
230526-zpkf8shb47
-
MD5
852898aa712f5881dd31e87aa194f478
-
SHA1
71cc1b8dc912cd0e4a7ed92800212250fbcf38de
-
SHA256
3a4904bf17873517ab66d8aa6ccf235542f833cbf2b486a17ad6f18a8e2bb7ae
-
SHA512
5db8dffe98c6b149f75cbaaadc62c7567dce7c92d09cec1a99f2ca5d098537842a3101335f9a9584b4fe1426c40835fc918745e76854a6fd2efac33210c54e03
-
SSDEEP
384:r7yAWg0ODpmRgVoOsKhElKeGMlUhHhhbwa57HL28B2eBJCBXQL:r1WqfVoOsKeI1MeBhbPpbPJQQL
Static task
static1
Behavioral task
behavioral1
Sample
sample.html
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
sample.html
Resource
win7-20230220-en
Behavioral task
behavioral3
Sample
sample.html
Resource
win10v2004-20230221-en
Behavioral task
behavioral4
Sample
sample.html
Resource
android-x64-20220823-en
Behavioral task
behavioral5
Sample
sample.html
Resource
android-x64-arm64-20220823-en
Behavioral task
behavioral6
Sample
sample.html
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral7
Sample
sample.html
Resource
macos-20220504-en
Malware Config
Targets
-
-
Target
sample
-
Size
16KB
-
MD5
852898aa712f5881dd31e87aa194f478
-
SHA1
71cc1b8dc912cd0e4a7ed92800212250fbcf38de
-
SHA256
3a4904bf17873517ab66d8aa6ccf235542f833cbf2b486a17ad6f18a8e2bb7ae
-
SHA512
5db8dffe98c6b149f75cbaaadc62c7567dce7c92d09cec1a99f2ca5d098537842a3101335f9a9584b4fe1426c40835fc918745e76854a6fd2efac33210c54e03
-
SSDEEP
384:r7yAWg0ODpmRgVoOsKhElKeGMlUhHhhbwa57HL28B2eBJCBXQL:r1WqfVoOsKeI1MeBhbPpbPJQQL
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-
Registers COM server for autorun
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Legitimate hosting services abused for malware hosting/C2
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-