Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2368aa18bcdbe7be7eb90add30b17d35
-
Size
11.8MB
-
Sample
231225-q7xd3sfcf5
-
MD5
2368aa18bcdbe7be7eb90add30b17d35
-
SHA1
39952f16bba27c35d4c8825d7ce59e01afc8daae
-
SHA256
5081506feb46f06efc15eb14a7deff7618a7bfbe0a42363c6478540002647c7e
-
SHA512
9d29520e8a23be63274687e4fa22a557d864b1161dd1e75f765bddd2b96aa2e82423ccde3b5eecc909ffd004339a46f152e8c44fd1fdbe71fcf2d617992854da
-
SSDEEP
12288:CKBz1FxKfGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG2:JBz1Fx
Static task
static1
Behavioral task
behavioral1
Sample
2368aa18bcdbe7be7eb90add30b17d35.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2368aa18bcdbe7be7eb90add30b17d35.exe
Resource
win10v2004-20231222-en
Malware Config
Extracted
tofsee
43.231.4.7
lazystax.ru
Targets
-
-
Target
2368aa18bcdbe7be7eb90add30b17d35
-
Size
11.8MB
-
MD5
2368aa18bcdbe7be7eb90add30b17d35
-
SHA1
39952f16bba27c35d4c8825d7ce59e01afc8daae
-
SHA256
5081506feb46f06efc15eb14a7deff7618a7bfbe0a42363c6478540002647c7e
-
SHA512
9d29520e8a23be63274687e4fa22a557d864b1161dd1e75f765bddd2b96aa2e82423ccde3b5eecc909ffd004339a46f152e8c44fd1fdbe71fcf2d617992854da
-
SSDEEP
12288:CKBz1FxKfGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG2:JBz1Fx
Score10/10-
Creates new service(s)
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-