Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

WebScanInstaller.exe

windows7-x64

7

WebScanInstaller.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    WebScanInstaller.exe

  • Size

    182KB

  • Sample

    231116-1a6xcsha3t

  • MD5

    b084e67a76f98a99f2fb83c93a48962d

  • SHA1

    c96d6d3c7b09ffa641ff7da222c2b8aec5f7aa22

  • SHA256

    117ee48c6693cb89622f5ba822e7c751c4d4c2518adf3ee2935fb95a83952f29

  • SHA512

    706aed4c7abe132d52dc33db0a0848bfdb3dd759af4a5b489ed280811e70b3494991b2a365ff43fe76bada5d3044f33c5970a74d1927425ed1fdbd5949978a47

  • SSDEEP

    3072:Dn1/uEAgDPdkBlyFZ+ScjaiKWbETBquAEXlqsW9G29TeOSpXaehd3Y/I8O9qE:D1OgDPdkBAFZWjadD4s8Tkp9T3hDB

Score
7/10

Malware Config

Targets

    • Target

      WebScanInstaller.exe

    • Size

      182KB

    • MD5

      b084e67a76f98a99f2fb83c93a48962d

    • SHA1

      c96d6d3c7b09ffa641ff7da222c2b8aec5f7aa22

    • SHA256

      117ee48c6693cb89622f5ba822e7c751c4d4c2518adf3ee2935fb95a83952f29

    • SHA512

      706aed4c7abe132d52dc33db0a0848bfdb3dd759af4a5b489ed280811e70b3494991b2a365ff43fe76bada5d3044f33c5970a74d1927425ed1fdbd5949978a47

    • SSDEEP

      3072:Dn1/uEAgDPdkBlyFZ+ScjaiKWbETBquAEXlqsW9G29TeOSpXaehd3Y/I8O9qE:D1OgDPdkBAFZWjadD4s8Tkp9T3hDB

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks