Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
SecuriteInfo.com.Win32.RATX-gen.5138.32043
-
Size
782KB
-
Sample
231115-bnxheaba9t
-
MD5
9bb7f3b0c32cc58c27054de628206cee
-
SHA1
5fd5e46dc9a53b5af49fcac45f52d3ccd60114b4
-
SHA256
a999fa0b2c139c85ebb6a33cc1785777a333ee9b491ca696d776887f6d0400bc
-
SHA512
fb21b4e0c1466c16e75b28e716c13b000c3a5a093e1693f73806520522833618904ec5968f3c57a9264159002f34738c78e356eb06aaccd8ba95f047198e500e
-
SSDEEP
12288:DSprtFnXkIxN/9PCfsC6jf0ftLoydvr8yj2+/DV+3:6pF0AN/S2fstsyw+
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.RATX-gen.5138.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.RATX-gen.5138.exe
Resource
win10v2004-20231020-en
Malware Config
Targets
-
-
Target
SecuriteInfo.com.Win32.RATX-gen.5138.32043
-
Size
782KB
-
MD5
9bb7f3b0c32cc58c27054de628206cee
-
SHA1
5fd5e46dc9a53b5af49fcac45f52d3ccd60114b4
-
SHA256
a999fa0b2c139c85ebb6a33cc1785777a333ee9b491ca696d776887f6d0400bc
-
SHA512
fb21b4e0c1466c16e75b28e716c13b000c3a5a093e1693f73806520522833618904ec5968f3c57a9264159002f34738c78e356eb06aaccd8ba95f047198e500e
-
SSDEEP
12288:DSprtFnXkIxN/9PCfsC6jf0ftLoydvr8yj2+/DV+3:6pF0AN/S2fstsyw+
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext
-