Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1bfb30639d02336395de9a01866d63b0
-
Size
425KB
-
Sample
231225-ag5prsahc8
-
MD5
1bfb30639d02336395de9a01866d63b0
-
SHA1
6f1139516c8b5a7fd8a36fcfcc52d0e93fa15111
-
SHA256
20ba3ad626dca31c666bfff0ff3d1d2cf71b664383cb7c775b7f4a9725989b89
-
SHA512
2bced330d656d43ecbb89fc13e42cac77c125ce1f879f2e80f5032d02755da15ab70e99fe789b66d980dc72ec235e906ffc0734e07551aef291290da03871ed1
-
SSDEEP
1536:2TJjMefFvUW9jjaZoSbdD2DDo/wwyI5GM0M7eSB3/OizN+jsgevhWqLegb0hp:utMeN8W9jLS5D2g/Ry6GSB33Fge5ySo
Behavioral task
behavioral1
Sample
1bfb30639d02336395de9a01866d63b0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1bfb30639d02336395de9a01866d63b0.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
1bfb30639d02336395de9a01866d63b0
-
Size
425KB
-
MD5
1bfb30639d02336395de9a01866d63b0
-
SHA1
6f1139516c8b5a7fd8a36fcfcc52d0e93fa15111
-
SHA256
20ba3ad626dca31c666bfff0ff3d1d2cf71b664383cb7c775b7f4a9725989b89
-
SHA512
2bced330d656d43ecbb89fc13e42cac77c125ce1f879f2e80f5032d02755da15ab70e99fe789b66d980dc72ec235e906ffc0734e07551aef291290da03871ed1
-
SSDEEP
1536:2TJjMefFvUW9jjaZoSbdD2DDo/wwyI5GM0M7eSB3/OizN+jsgevhWqLegb0hp:utMeN8W9jLS5D2g/Ry6GSB33Fge5ySo
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-