Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4e3acf39223fe37b58ad0380e90ef6c6.exe
-
Size
292KB
-
Sample
240109-xn12gsgfhn
-
MD5
4e3acf39223fe37b58ad0380e90ef6c6
-
SHA1
2c3962fd64095525f68e1f6449a71ab40a37fdb3
-
SHA256
294d95dd888eb3cbee4f931156e0baf2fb1170b3e3823ba90a2fc74c1d00483c
-
SHA512
1465d96feae40054306366dec190abe19fd9074a7b25b9fb4d56880c3fcc6a3fdf7aa7dfebf5bfabdf5b0fa216e419f52598c684c3a8994620d9548d2a7989da
-
SSDEEP
6144:NZD4Gac2LvVBawbNac5w012I3IQCKeX9+1+:NZ1aLVEwFFQI3IQCK
Static task
static1
Behavioral task
behavioral1
Sample
4e3acf39223fe37b58ad0380e90ef6c6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e3acf39223fe37b58ad0380e90ef6c6.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
4e3acf39223fe37b58ad0380e90ef6c6.exe
-
Size
292KB
-
MD5
4e3acf39223fe37b58ad0380e90ef6c6
-
SHA1
2c3962fd64095525f68e1f6449a71ab40a37fdb3
-
SHA256
294d95dd888eb3cbee4f931156e0baf2fb1170b3e3823ba90a2fc74c1d00483c
-
SHA512
1465d96feae40054306366dec190abe19fd9074a7b25b9fb4d56880c3fcc6a3fdf7aa7dfebf5bfabdf5b0fa216e419f52598c684c3a8994620d9548d2a7989da
-
SSDEEP
6144:NZD4Gac2LvVBawbNac5w012I3IQCKeX9+1+:NZ1aLVEwFFQI3IQCK
Score10/10-
Modifies WinLogon for persistence
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-