Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0cf5390295c3b5cd1e4d8fa29ec624aa
-
Size
271KB
-
Sample
231230-d1dl6scahq
-
MD5
0cf5390295c3b5cd1e4d8fa29ec624aa
-
SHA1
569323435ee0fdff12cb927a0583636591342846
-
SHA256
3648ed90c126b451398fb10a2aaa053c21960c9a6451300f9dd9b84c973c2d58
-
SHA512
33d285497e6880bbb9b5ac0f7abd0acb9997439f4eeacf4499406a0ee4828a7f42ae1384bb6ff765264985ddd094f5be76a657f3bd7591ff228610cc4e302043
-
SSDEEP
6144:bUrqA3AheuswyPnDh4+AVx1OSu4u/mRMnxaHnb0sK5R2:bUWA3AheuswyLhDax8Snu/aMxKrl
Static task
static1
Behavioral task
behavioral1
Sample
0cf5390295c3b5cd1e4d8fa29ec624aa.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0cf5390295c3b5cd1e4d8fa29ec624aa.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
0cf5390295c3b5cd1e4d8fa29ec624aa
-
Size
271KB
-
MD5
0cf5390295c3b5cd1e4d8fa29ec624aa
-
SHA1
569323435ee0fdff12cb927a0583636591342846
-
SHA256
3648ed90c126b451398fb10a2aaa053c21960c9a6451300f9dd9b84c973c2d58
-
SHA512
33d285497e6880bbb9b5ac0f7abd0acb9997439f4eeacf4499406a0ee4828a7f42ae1384bb6ff765264985ddd094f5be76a657f3bd7591ff228610cc4e302043
-
SSDEEP
6144:bUrqA3AheuswyPnDh4+AVx1OSu4u/mRMnxaHnb0sK5R2:bUWA3AheuswyLhDax8Snu/aMxKrl
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-