Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
73ddc41c416ef500234443c0d796f13e2a1f47467d72508ae6c1619585ca0a3f
-
Size
1.4MB
-
Sample
230920-r2bqvsah59
-
MD5
6453684e072f41e0604d6255920b43d2
-
SHA1
dcc2bbfbb658cd350f05ed61013945d4284ddec5
-
SHA256
73ddc41c416ef500234443c0d796f13e2a1f47467d72508ae6c1619585ca0a3f
-
SHA512
b44f76241efe96e4594295a4fe9b770fb35efe5b1e569bdea1255b50139f7bf1eb67c0ec098570d48d169ba6ea6818ec9a7cd7d0abf3996714d48ae8d3801dfd
-
SSDEEP
24576:U2G/nvxW3Ww0tRp8GiXTBhq7yRDvHcUcjUvy0lr3Tl6icOB/UWoT:UbA30H4zF0UMSAicOB/UWk
Static task
static1
Malware Config
Targets
-
-
Target
73ddc41c416ef500234443c0d796f13e2a1f47467d72508ae6c1619585ca0a3f
-
Size
1.4MB
-
MD5
6453684e072f41e0604d6255920b43d2
-
SHA1
dcc2bbfbb658cd350f05ed61013945d4284ddec5
-
SHA256
73ddc41c416ef500234443c0d796f13e2a1f47467d72508ae6c1619585ca0a3f
-
SHA512
b44f76241efe96e4594295a4fe9b770fb35efe5b1e569bdea1255b50139f7bf1eb67c0ec098570d48d169ba6ea6818ec9a7cd7d0abf3996714d48ae8d3801dfd
-
SSDEEP
24576:U2G/nvxW3Ww0tRp8GiXTBhq7yRDvHcUcjUvy0lr3Tl6icOB/UWoT:UbA30H4zF0UMSAicOB/UWk
-
Modifies Windows Firewall
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-