Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
24F72BFF.exe
-
Size
4.9MB
-
Sample
230719-kmkxnaah5v
-
MD5
af083dae1594bdc4afac0fc68dfbad5f
-
SHA1
16382113647d5a2ec1af9250faaf80bc998d44d3
-
SHA256
28a646ddb6b3dc629f272733ff18ab5be8a5bd958b9b744165f43d781b5a689f
-
SHA512
06286c44db09227c5ddeedcf51d30775885e8a4ee009beaef6924d6872f4975ad3dee8c0f7503443d8a21ff4d6a18319a1c021433d497ff9f495d4f6760a046c
-
SSDEEP
98304:VCRO8LxoKamrrviBpj1IpegiqG347SylA9YZGUgzMeTgbA:lEolmrrviBpHgi/347/gYZPeoA
Static task
static1
Behavioral task
behavioral1
Sample
24F72BFF.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
24F72BFF.exe
Resource
win10v2004-20230703-en
Malware Config
Targets
-
-
Target
24F72BFF.exe
-
Size
4.9MB
-
MD5
af083dae1594bdc4afac0fc68dfbad5f
-
SHA1
16382113647d5a2ec1af9250faaf80bc998d44d3
-
SHA256
28a646ddb6b3dc629f272733ff18ab5be8a5bd958b9b744165f43d781b5a689f
-
SHA512
06286c44db09227c5ddeedcf51d30775885e8a4ee009beaef6924d6872f4975ad3dee8c0f7503443d8a21ff4d6a18319a1c021433d497ff9f495d4f6760a046c
-
SSDEEP
98304:VCRO8LxoKamrrviBpj1IpegiqG347SylA9YZGUgzMeTgbA:lEolmrrviBpHgi/347/gYZPeoA
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-