Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
AMM Consol 020-04860612.bat.exe
-
Size
708KB
-
Sample
240129-q5tkeabbh3
-
MD5
3e902a2f0a5c02538f27858309c44e71
-
SHA1
e5c42d3dcc966129b35fda066267a98f040b765d
-
SHA256
75db37564d36a9f7cf79c21a1f69c5acc5149d6cf32f270b7799531b0d8b3327
-
SHA512
17a8708042e49b20013284921ec25fbab64b81a657b75ed7c66e65fd451798775046818a53048e8ae9d12405a9a0f8b03667c285bdf6bf494c20fae5abcdf4e8
-
SSDEEP
12288:7aFpedTKGZr4NS52Hd5M+Igh/SkjY/oXA9ULcdD1bT78myovhd:Se/r4Hd5H0L9uch98mb
Static task
static1
Behavioral task
behavioral1
Sample
AMM Consol 020-04860612.bat.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
AMM Consol 020-04860612.bat.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
AMM Consol 020-04860612.bat.exe
-
Size
708KB
-
MD5
3e902a2f0a5c02538f27858309c44e71
-
SHA1
e5c42d3dcc966129b35fda066267a98f040b765d
-
SHA256
75db37564d36a9f7cf79c21a1f69c5acc5149d6cf32f270b7799531b0d8b3327
-
SHA512
17a8708042e49b20013284921ec25fbab64b81a657b75ed7c66e65fd451798775046818a53048e8ae9d12405a9a0f8b03667c285bdf6bf494c20fae5abcdf4e8
-
SSDEEP
12288:7aFpedTKGZr4NS52Hd5M+Igh/SkjY/oXA9ULcdD1bT78myovhd:Se/r4Hd5H0L9uch98mb
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext
-