Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e8fd17e6d28f1406f23069fc57dcbccc_JC.exe
-
Size
289KB
-
Sample
230923-ryadmaac43
-
MD5
e8fd17e6d28f1406f23069fc57dcbccc
-
SHA1
84ed8ef932642a7ac4e14c5aaf574fcefb5fdde1
-
SHA256
66676967121a4a6c888272333421b82973cb9b8c58d85b56aaa64be3ab2149bc
-
SHA512
f245c1b7b65b9784ea24aa4c911082821a3acbf8b99ea90117b5b1d8355264e17e619b2017da8ce3c269a6e50bb40bd4c4b84bd7a74b92b84c8d361303447691
-
SSDEEP
6144:U5wLulwRBdtGFGo6YpO9sxkECzJLaQVbU5:zua7dtGFGn7GxklJLJbU5
Static task
static1
Behavioral task
behavioral1
Sample
e8fd17e6d28f1406f23069fc57dcbccc_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e8fd17e6d28f1406f23069fc57dcbccc_JC.exe
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
e8fd17e6d28f1406f23069fc57dcbccc_JC.exe
-
Size
289KB
-
MD5
e8fd17e6d28f1406f23069fc57dcbccc
-
SHA1
84ed8ef932642a7ac4e14c5aaf574fcefb5fdde1
-
SHA256
66676967121a4a6c888272333421b82973cb9b8c58d85b56aaa64be3ab2149bc
-
SHA512
f245c1b7b65b9784ea24aa4c911082821a3acbf8b99ea90117b5b1d8355264e17e619b2017da8ce3c269a6e50bb40bd4c4b84bd7a74b92b84c8d361303447691
-
SSDEEP
6144:U5wLulwRBdtGFGo6YpO9sxkECzJLaQVbU5:zua7dtGFGn7GxklJLJbU5
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-