Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Release.rar
-
Size
67.8MB
-
Sample
240120-z5778shbh4
-
MD5
98245d9f1e1ae4b9ecdef1d0d4eaa49e
-
SHA1
4ab6257748b025a870fd2d5ef687b52ae42f923e
-
SHA256
569090446dc07a749aae6e324515a9794ec04ca8ad3e3428d87f34c9930a9d0f
-
SHA512
a5124f6664ef706947be9a974dd89078969f33208631eb8121d7e6aa69e4e4aaa397187a0657f15441c8df4d4dbca404af69f247447e393859ce9eb1f0b5e31b
-
SSDEEP
1572864:TpHRjp+GrK5OOKSXb9+5e96hvcbMsAY/avpaPY0A0yZv9HiEvlExu/j9Hmg:TnLu5OOtbUc66xA9p6/Atowex0j91
Behavioral task
behavioral1
Sample
ColorCFG.txt
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ColorCFG.txt
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
main.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
main.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
storage/Font.otf
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
storage/Font.otf
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
ColorCFG.txt
-
Size
26B
-
MD5
418c9d9216123ec8263b7b2a0a7ba576
-
SHA1
0a7fe467443449692e03b1a231dcaf6677aa9ed1
-
SHA256
5a26b0c9f78587f2a94fa06966392e06381d780ecd1e0cae784f7f42638a6abd
-
SHA512
82ea501239bc79308a4c99101274457566186449125fc1f0ffc2b0f35c0b38e8bdc186e2afd58e1245b0ab4ed7eb5e373a9a38c7616c4c26d2120e4f4c83d65e
Score1/10 -
-
-
Target
main.exe
-
Size
68.4MB
-
MD5
0e95f0ad1a56e69f0bd2103cd03c70d3
-
SHA1
0be18972de8e666778b35fdee4b2162e8c371a09
-
SHA256
fef1c009c57be55eef25d1c21d56a4dbfbfa2f75517eaff82570d3113b4a914f
-
SHA512
0dbdc2a8e0e46e27bbf5c0d179e1d5d46b2c1bec9b3a706543193f206d74fbec4657163e02e03bded76954a0298669d05ef528d912654200d5e01bf296d84714
-
SSDEEP
1572864:tbmFP/V4f6Gj53ikjt4jRq2GqFOPV5edLlNNc12qHWB75ip/W5cW7dkPe:ot/VG6RmtCRlGPreg12qHO5ip/ocl
Score7/10-
Loads dropped DLL
-
-
-
Target
storage/Font.otf
-
Size
124KB
-
MD5
722c5f898bbca8b2eb3fce0287688326
-
SHA1
acd8beda0d3d0d108f94092cece27d1ab74ddada
-
SHA256
88b3795f97ee469c9e30430b54d35c11cdf28c96e3e71d0122e37e6bf025c0b8
-
SHA512
1117e3a9c2645e1446e7107f2898e3937a36221be53a747aaa2580129adebf117ae6777e2973e8a886c5e116a510fecc22640cc47352f738785d78c94ae2bb53
-
SSDEEP
3072:fsr06ylOmoz++ieHRB5RTqpYPBRbaV+LSPz8q2WVzVZoDyg67mZ3KcKv4LLEpPW:Er/JHJ1rePP2WNwDx7K7EEA
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-