Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
5f9127245473fbfdab735869bce40d88
-
Size
484KB
-
Sample
231226-ka1gksace9
-
MD5
5f9127245473fbfdab735869bce40d88
-
SHA1
4960afd3e5e88ec967973248b93b97a4743fa5d1
-
SHA256
9bff283edf384a62a8aab5d2827b1c8fd4514746fc7f2c3ce688a34b419a1a86
-
SHA512
4299e96e65b96b78bb84896c84fadcf321c7afff31b926988ca2ea0478f61724f015ac583b5a19bab6d3f3ae35a56cf31749478cb13ae8e5011e35438046f4b1
-
SSDEEP
12288:hoUld/f2I9JECdYW4/e4Pii15XZSAmKjlafbdDNUQ:R92ILECd0R15XZS3QafpDNUQ
Static task
static1
Behavioral task
behavioral1
Sample
5f9127245473fbfdab735869bce40d88.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5f9127245473fbfdab735869bce40d88.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
5f9127245473fbfdab735869bce40d88
-
Size
484KB
-
MD5
5f9127245473fbfdab735869bce40d88
-
SHA1
4960afd3e5e88ec967973248b93b97a4743fa5d1
-
SHA256
9bff283edf384a62a8aab5d2827b1c8fd4514746fc7f2c3ce688a34b419a1a86
-
SHA512
4299e96e65b96b78bb84896c84fadcf321c7afff31b926988ca2ea0478f61724f015ac583b5a19bab6d3f3ae35a56cf31749478cb13ae8e5011e35438046f4b1
-
SSDEEP
12288:hoUld/f2I9JECdYW4/e4Pii15XZSAmKjlafbdDNUQ:R92ILECd0R15XZS3QafpDNUQ
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-