Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3c6339d64560f8d8ca3e0a9c3c5a59bd
-
Size
4.2MB
-
Sample
240101-kg8frshff2
-
MD5
3c6339d64560f8d8ca3e0a9c3c5a59bd
-
SHA1
755b444ca60c1d1cd1e33e0fb9e8a26a9b1d9ac2
-
SHA256
0c423cf66f061e55ffd7da969058397142c7f95c0a886b7c483f3d86ebdeb1f9
-
SHA512
af72924cafdd1d062092285cee0aa558f911272948b073dd0b57c1d6b55772e76093301dc456a532fd896352bb3ab52865900e4f8ab006295eb0a96216944105
-
SSDEEP
98304:i9K9sEyR+cZ2PjP9p567V8uGY+rnrqZDxZ3Oq3p8tKCGOmZISzeR:eK9GXsPxp567+uGFr8VZ+q58tKCGr2HR
Static task
static1
Behavioral task
behavioral1
Sample
QLCai.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
QLCai.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
QLCai.exe
-
Size
4.3MB
-
MD5
2b25f6a9806d2538f2e0207feac8872c
-
SHA1
d1a04bef387032d0ebd5e35aec7583d748d48568
-
SHA256
c38e45bcf35206fc74a3d4e6e29377156e5c31af1f3085904c216a32c6305df4
-
SHA512
02e13d15783eb9a4d2a17365d2e6c25d2adcd83146a321167ab0477773c7e5c7796a61ad4bfb936358a921e3c9082c5bc16c257b0c6d9f79497d65e6e6c16cae
-
SSDEEP
98304:5+a6JLjH3dutXJSTP/sAQvA3W2nm+06ZANcu5ej60RZHcZNK3:5+3Jn3wOTPlQ8tm+0OImWIZf3
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
新云软件.url
-
Size
133B
-
MD5
4f0017b3b346bd0626f0c3b915e6e734
-
SHA1
823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
-
SHA256
df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
-
SHA512
0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
Score1/10 -