Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
35121acf69b96b25f3634ca8343ddfd7d27f24d3569f2d6f2013ac679028bcf0
-
Size
216KB
-
Sample
240201-h8l1qsecc4
-
MD5
3e4cbdec10b63697ff63b946819a3d52
-
SHA1
ef8309676085915c594596577dc8fcecd87f6d2d
-
SHA256
35121acf69b96b25f3634ca8343ddfd7d27f24d3569f2d6f2013ac679028bcf0
-
SHA512
b47c91bee006b20a4feff82628e8c043d41c87fa42010d85a07999da02e01ac684ddb4f121861c460a045374c49f14470dd2e6ce74bb4325bcf1f536353e4182
-
SSDEEP
3072:q17DaAz38w3vz7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:ab8eF6Pf2KQ+aVB2fJqh4Id
Static task
static1
Behavioral task
behavioral1
Sample
35121acf69b96b25f3634ca8343ddfd7d27f24d3569f2d6f2013ac679028bcf0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
35121acf69b96b25f3634ca8343ddfd7d27f24d3569f2d6f2013ac679028bcf0.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
35121acf69b96b25f3634ca8343ddfd7d27f24d3569f2d6f2013ac679028bcf0
-
Size
216KB
-
MD5
3e4cbdec10b63697ff63b946819a3d52
-
SHA1
ef8309676085915c594596577dc8fcecd87f6d2d
-
SHA256
35121acf69b96b25f3634ca8343ddfd7d27f24d3569f2d6f2013ac679028bcf0
-
SHA512
b47c91bee006b20a4feff82628e8c043d41c87fa42010d85a07999da02e01ac684ddb4f121861c460a045374c49f14470dd2e6ce74bb4325bcf1f536353e4182
-
SSDEEP
3072:q17DaAz38w3vz7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:ab8eF6Pf2KQ+aVB2fJqh4Id
Score9/10-
Renames multiple (297) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies boot configuration data using bcdedit
-
Sets desktop wallpaper using registry
-