Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1658856f99650fc701a84cd6f0c6cfc7
-
Size
916KB
-
Sample
231225-l8xzsadgh6
-
MD5
1658856f99650fc701a84cd6f0c6cfc7
-
SHA1
5a2c44c3a1b17ecfe19ef1b215d2e5606f7fafa0
-
SHA256
8db66f6bcd911ce2f96d524636fc6b023a54e26ad6c24711fde9aa4a07f5f633
-
SHA512
ce172672480340107727be3f173f44906b9162f29704d02950d7107ebe99b58507b7d6180443c9125a025d2a1ca3b1abcdb21b4e5ac6a6505677d41c771f4473
-
SSDEEP
24576:rwYFr0ySkThNKdao7LbKaCLyeJVDGJ2RtjAfL1HQgw049C8W:rwYV0ypNGa0uaMyeJV5jAD/kCt
Static task
static1
Behavioral task
behavioral1
Sample
1658856f99650fc701a84cd6f0c6cfc7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1658856f99650fc701a84cd6f0c6cfc7.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
1658856f99650fc701a84cd6f0c6cfc7
-
Size
916KB
-
MD5
1658856f99650fc701a84cd6f0c6cfc7
-
SHA1
5a2c44c3a1b17ecfe19ef1b215d2e5606f7fafa0
-
SHA256
8db66f6bcd911ce2f96d524636fc6b023a54e26ad6c24711fde9aa4a07f5f633
-
SHA512
ce172672480340107727be3f173f44906b9162f29704d02950d7107ebe99b58507b7d6180443c9125a025d2a1ca3b1abcdb21b4e5ac6a6505677d41c771f4473
-
SSDEEP
24576:rwYFr0ySkThNKdao7LbKaCLyeJVDGJ2RtjAfL1HQgw049C8W:rwYV0ypNGa0uaMyeJV5jAD/kCt
Score10/10-
Modifies WinLogon for persistence
-
Sets service image path in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
-