Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Flaggex_V1.4.rar
-
Size
40.5MB
-
Sample
240222-wgzdmsdg73
-
MD5
bca40237fce4d3b58b15ceee99be3027
-
SHA1
762680f7f7fd78ce51b001c9f1165e4eea40c304
-
SHA256
63bc00e800e4d13914d9b012650c0028b18fc1bc492089d9b345b4bf7286021e
-
SHA512
9f05f8166f3dd4e252e6bb81cd1527ed19c9932ce6e809f208e29c59932a04804fa87e4949508b62ed2a9d5d66c9d76bcfdcd388bbb2b07cda525b28761d3ca2
-
SSDEEP
786432:zTqwUhDKuXKK13MwsOTuxRqdNX8jNTKTSmOcWGBA9hco56SzckaM:PFUhDfaK18CQqn852OcPBCSS4s
Behavioral task
behavioral1
Sample
Flaggex_V1.4.rar
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Flaggex_V1.4.rar
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
Flaggex V1.3/Flaggex.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Flaggex V1.3/Flaggex.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
flaggex.pyc
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
flaggex.pyc
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
Flaggex V1.3/config.txt
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Flaggex V1.3/config.txt
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
Flaggex_V1.4.rar
-
Size
40.5MB
-
MD5
bca40237fce4d3b58b15ceee99be3027
-
SHA1
762680f7f7fd78ce51b001c9f1165e4eea40c304
-
SHA256
63bc00e800e4d13914d9b012650c0028b18fc1bc492089d9b345b4bf7286021e
-
SHA512
9f05f8166f3dd4e252e6bb81cd1527ed19c9932ce6e809f208e29c59932a04804fa87e4949508b62ed2a9d5d66c9d76bcfdcd388bbb2b07cda525b28761d3ca2
-
SSDEEP
786432:zTqwUhDKuXKK13MwsOTuxRqdNX8jNTKTSmOcWGBA9hco56SzckaM:PFUhDfaK18CQqn852OcPBCSS4s
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
Flaggex V1.3/Flaggex.exe
-
Size
40.8MB
-
MD5
63de3b75d86fdfc8bd711a37639d2329
-
SHA1
6c3d7c3c5a198ddd5135f7ba661a56cd9e9366ab
-
SHA256
cdb70fc126c16769ca439db9f8edcbdc976565a73397c95b661817447f087abd
-
SHA512
f917ab2282e8a0b4c7305c23d6d1bd51194ad8b6275a40b42120d3d7b4105a533469c533b227f91296d2510cb67315d0d4807d32ab7260f80e44de5a8682e208
-
SSDEEP
786432:wZENRMZ8H95WpqgVL0kDLBSgpnORko5gLC+7R3wuDblJkAdRLW+e5v9kHR:wZEvMSWRVL0yBQt+HDblJkAHLW+el
Score7/10-
Loads dropped DLL
-
-
-
Target
flaggex.pyc
-
Size
9KB
-
MD5
d401417dad834f69f76ce73db8f2235a
-
SHA1
ceb68f416d5177267ff85c488691cf73ab57ecbb
-
SHA256
2a9298ae278352c36765b0288729ead85a7e1461314fb3e8dc3fdc7ca0835f80
-
SHA512
981536fc5c8335f5d9e9a5f0061d2962d2f1e2c8a3599da9413f938a16a7bb5505e5fbb3233ac02887d2fe5f8d0e14776257d37056e61b9567b104a8b63f356e
-
SSDEEP
96:Cuvr67l7n0x7o75qRAlI7cX9DnYzeIE7wfQ1VFCWMJfqpUGw4YSHO9pcmjUqGYYH:CGi08RXRnuLEctqpBvu9pXUqGYyqSszK
Score3/10 -
-
-
Target
Flaggex V1.3/config.txt
-
Size
89B
-
MD5
cb1c11765eff06a1ffe1ce190d0305c6
-
SHA1
4af0f49795303de3dc694b919b9f4e79d66363da
-
SHA256
5949245c4a5752f12395d31dbc9bd10ae5b450c60c357d96d5a9a6aecc54ea0c
-
SHA512
2a5acb6ed14b2f5d69f4096c03125b3ff5aec5e4e30d00dccac28cdf9523be7200e23b544b44abb4fbc344f7551725a6b2d1145b9c4c8e09128d75c565955017
Score1/10 -