Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
7842bc745e4c48efeb6ba743cd98fcbb
-
Size
1.3MB
-
Sample
240126-yqfc8sdcg8
-
MD5
7842bc745e4c48efeb6ba743cd98fcbb
-
SHA1
7dfb59ab128df696d1fbbb5e404e58549c682a31
-
SHA256
a5de2d43ad63dc2314c5823b3a9ecd0eec43057a38016e8f541a5495c0312675
-
SHA512
7b2945fdf5c310aa18a58823a1b1c18473fff7036ad001067ce39a7f60e0368997928eac4cc90c4c6d07fc0c17534366d2400b778e705e683db42c24140231aa
-
SSDEEP
24576:+ba/MZz9DT1DHEZbDsqwD7Yyr8kmEAZSIZLzlQAeSxf/Tus28R6:x2PjEc7EZSIzlQA3xf7B6
Static task
static1
Behavioral task
behavioral1
Sample
hosts自动更新工具/hostsup.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
hosts自动更新工具/hostsup.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
hosts自动更新工具/新云软件.url
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
hosts自动更新工具/新云软件.url
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
hosts自动更新工具/hostsup.exe
-
Size
1.3MB
-
MD5
c21960106da028ab79683b1734959d2f
-
SHA1
c5f8ee61978422dfaba4a910c11136fad6ac3ea6
-
SHA256
8245fbf6adfce62357bf92c6e4e12358e04ad7ea9b6b131fb30ba03eaa8c9443
-
SHA512
d3629fe553eb4920731db4e05ad17e12f10691ff4a4a5e811de8701f0f8748335ce90c506934f82b813b0f6f2ee84710eca2aec7213df1444af8e111da01cc06
-
SSDEEP
24576:vczJKVdfnx6G7Aa6lMr1SA3IreNbNhl88Vo5i+MgZPeScqzYcypZBecGnQ2J+x:vcAvx6GJ6lM1SaAeVl88Vo5qgcqzY7Zx
Score8/10-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
-
-
Target
hosts自动更新工具/新云软件.url
-
Size
133B
-
MD5
4f0017b3b346bd0626f0c3b915e6e734
-
SHA1
823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
-
SHA256
df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
-
SHA512
0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
Score1/10 -