Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
de10b8454ebb363ab1469cebbd9898b2df591101806aedd9aab0b8b16139c806
-
Size
4.8MB
-
Sample
240101-sgesfsfeb2
-
MD5
14888882bcf01c20a4a45bb9aa2b35f7
-
SHA1
50915c9c2855987e1191bbd2c510e067150b2a0f
-
SHA256
de10b8454ebb363ab1469cebbd9898b2df591101806aedd9aab0b8b16139c806
-
SHA512
c7ae29fddc996e4172672d8e28466f23e3afdbd458345679b5895b1d94e5cdd8120e51480837929b08d1373690aadecb601b7b0dc08ad47b36338c621a2d7436
-
SSDEEP
49152:vLiH3r02PBZrb/T5vO90dL3BmAFd4A64nsfJF4QWjmy25yr5nBFwLYgN4Ew5Ew1e:G3BlGy2CGyEkVHBhfwjPTBL5TJhLRp
Static task
static1
Behavioral task
behavioral1
Sample
de10b8454ebb363ab1469cebbd9898b2df591101806aedd9aab0b8b16139c806.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
de10b8454ebb363ab1469cebbd9898b2df591101806aedd9aab0b8b16139c806.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
C:\MSOCache\All Users\{90140000-0019-0409-0000-0000000FF1CE}-C\HOW TO RESTORE YOUR TIYWEPXB FILES.TXT
Targets
-
-
Target
de10b8454ebb363ab1469cebbd9898b2df591101806aedd9aab0b8b16139c806
-
Size
4.8MB
-
MD5
14888882bcf01c20a4a45bb9aa2b35f7
-
SHA1
50915c9c2855987e1191bbd2c510e067150b2a0f
-
SHA256
de10b8454ebb363ab1469cebbd9898b2df591101806aedd9aab0b8b16139c806
-
SHA512
c7ae29fddc996e4172672d8e28466f23e3afdbd458345679b5895b1d94e5cdd8120e51480837929b08d1373690aadecb601b7b0dc08ad47b36338c621a2d7436
-
SSDEEP
49152:vLiH3r02PBZrb/T5vO90dL3BmAFd4A64nsfJF4QWjmy25yr5nBFwLYgN4Ew5Ew1e:G3BlGy2CGyEkVHBhfwjPTBL5TJhLRp
Score10/10-
Clears Windows event logs
-
Stops running service(s)
-
Drops startup file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-