Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    VoxalVoiceChanger (1).exe

  • Size

    1.5MB

  • Sample

    230603-fy8ewaga5v

  • MD5

    4e35dbe25ed69344678ed1c1efd25446

  • SHA1

    634ab87acd879650618a85bfc9d2fecd59d564cb

  • SHA256

    fa5ee58d75ac53d048c9cac277fe6f5d99e71fe14295b0fe9b25bcf8aa9b5d69

  • SHA512

    9c3b86ede8b5ebc9cb079c87b00a0cbb85b6ececae35eb2b56438598fefc034cef513bfdfff1767ba887494ad88edf770232af280eb650e34189703317df5a73

  • SSDEEP

    24576:f1lUPDkN3CsCzHSRvqhp1ESYmmc3R9Zc3uunHZELXipffrBLYtXuCdGavk8s:NSa3CsCzavI1xYmmaFczn5tffrBLPCKn

Malware Config

Targets

    • Target

      VoxalVoiceChanger (1).exe

    • Size

      1.5MB

    • MD5

      4e35dbe25ed69344678ed1c1efd25446

    • SHA1

      634ab87acd879650618a85bfc9d2fecd59d564cb

    • SHA256

      fa5ee58d75ac53d048c9cac277fe6f5d99e71fe14295b0fe9b25bcf8aa9b5d69

    • SHA512

      9c3b86ede8b5ebc9cb079c87b00a0cbb85b6ececae35eb2b56438598fefc034cef513bfdfff1767ba887494ad88edf770232af280eb650e34189703317df5a73

    • SSDEEP

      24576:f1lUPDkN3CsCzHSRvqhp1ESYmmc3R9Zc3uunHZELXipffrBLYtXuCdGavk8s:NSa3CsCzavI1xYmmaFczn5tffrBLPCKn

    • Drops file in Drivers directory

    • Adds Run key to start application

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v6

Tasks