Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e2127d2e0a399c731054672bdc57cccc70ff11db384b525acc02e4a090c60cc7
-
Size
208KB
-
Sample
231114-xhzapsdb52
-
MD5
0db48efce48f55d7337612906b419908
-
SHA1
437373019e49d916a132d53a85e9aee9fc42992e
-
SHA256
e2127d2e0a399c731054672bdc57cccc70ff11db384b525acc02e4a090c60cc7
-
SHA512
6a3b8bd1bf097a064197000acd6308756d9131b3424e824565dacecaebcb350acf64f3d757c051442d25f28c61f956e7d68f5dadb87b05f13037e68cae541c6e
-
SSDEEP
6144:0ccNqCU8GLVlTJQZ2nrxLOEjIMiSN0PhoJ94B5tYR:nlTJQmrNOEjI1SN0Pi34LtI
Static task
static1
Behavioral task
behavioral1
Sample
e2127d2e0a399c731054672bdc57cccc70ff11db384b525acc02e4a090c60cc7.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
e2127d2e0a399c731054672bdc57cccc70ff11db384b525acc02e4a090c60cc7.exe
Resource
win10v2004-20231023-en
Malware Config
Extracted
http://r.dbfhdbkd.pw/gate/update.php
Extracted
http://r.dbfhdbkd.pw/gate/update.php
Targets
-
-
Target
e2127d2e0a399c731054672bdc57cccc70ff11db384b525acc02e4a090c60cc7
-
Size
208KB
-
MD5
0db48efce48f55d7337612906b419908
-
SHA1
437373019e49d916a132d53a85e9aee9fc42992e
-
SHA256
e2127d2e0a399c731054672bdc57cccc70ff11db384b525acc02e4a090c60cc7
-
SHA512
6a3b8bd1bf097a064197000acd6308756d9131b3424e824565dacecaebcb350acf64f3d757c051442d25f28c61f956e7d68f5dadb87b05f13037e68cae541c6e
-
SSDEEP
6144:0ccNqCU8GLVlTJQZ2nrxLOEjIMiSN0PhoJ94B5tYR:nlTJQmrNOEjI1SN0Pi34LtI
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-