Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
67d44aa45f19678526582c3d0aa78332
-
Size
592KB
-
Sample
240119-rk585sfefn
-
MD5
67d44aa45f19678526582c3d0aa78332
-
SHA1
8b52470d31979942fccdd1e417e0685a6777a72d
-
SHA256
e432d36803780fd2ea84a04a8c3da628c199f7e4475452d80073cbe414b64b5a
-
SHA512
59b36082503b51f24cd0e6f39c71d699641033738b3b2d1b7ef3832a9fc9f673da3c51fc99476c3ebb26b50cba6a0358fbbebea4cfe368563e4ccf0d8eed57b5
-
SSDEEP
12288:Sjl1j3u349jP0uKFe1SfG03I3frsCLlFeu/Na6hvV8ZAgAB:qvj3uI9FOp3+frsSFeuJhvhgM
Static task
static1
Behavioral task
behavioral1
Sample
FOREXT~1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
FOREXT~1.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Install.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Install.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
FOREXT~1.EXE
-
Size
92KB
-
MD5
ae43c4e21eb3ce59abc11a05715b3ded
-
SHA1
71ff6401da206f316ac0763d458dd5035c74349b
-
SHA256
cfbb3ee7d20862277a2f64c4bd375769a3f94434d7440b3c70302e4ca204d451
-
SHA512
f45ca34601c36333b4842c592381677fa042ee7c8e40d83bce71758f3288c3e261ee83a65e3226416545a0506a0c1c3ca1058e2fbd7d082c45b1c5cdf3bc47a7
-
SSDEEP
768:qZweQjcSJnuSCbIG4BTvOIQu3MQWfLggoDEcLqgIjbKkTte1:SwcS4hxSD/ZWcgoOgYbPBe
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
Install.exe
-
Size
595KB
-
MD5
3ec43a4d00dc9528cd4a11c9db0d4962
-
SHA1
2c9ed0ad29ba606893c564a810205b11302d324a
-
SHA256
43ac3ff8b8396ba17d9d38862f306bcd84481b1165bfaf238674c72435ceaca7
-
SHA512
f400f399be3b6bb528e0c1c05658a5722486c9316e61532cc60cab2fd65b1946d5e94b580bb3749e25044b96d136533622c7417268c1f576bd76ab96394953e4
-
SSDEEP
12288:u16jWu349V60fKF11SfRZ3Pxfms+LKFeu/Ja634V8lDv:RjWuI9vZD3ZfmstFeuN348
Score1/10 -