Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
abc15af4008e8832a0a6cc6c90bf1599
-
Size
724KB
-
Sample
240228-nedp6aac22
-
MD5
abc15af4008e8832a0a6cc6c90bf1599
-
SHA1
66ccce6161849dd40d20bf1b5b30f2ee4cd74bd2
-
SHA256
9b2b1e301bed2e080fb835aece6d2644b1ca3b5b673b34617bc6c0f378307d5a
-
SHA512
faf4ba5cf6f5782b9b4dea6e2320ef6dfc207c011682f03b90a3430b43844c18ca3b2634ff040783f7575f065794284968185d86639dec48c3fac3febf10a872
-
SSDEEP
12288:uxHjL99LsEONTlqagN59/2MzTcDYOtygo2ZJTaR6fHl6vKP2rUi6K6aKUUifD0:aL99wBTlqagH12OcDYOogo23WR6fJPSK
Static task
static1
Behavioral task
behavioral1
Sample
abc15af4008e8832a0a6cc6c90bf1599.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
abc15af4008e8832a0a6cc6c90bf1599.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
abc15af4008e8832a0a6cc6c90bf1599
-
Size
724KB
-
MD5
abc15af4008e8832a0a6cc6c90bf1599
-
SHA1
66ccce6161849dd40d20bf1b5b30f2ee4cd74bd2
-
SHA256
9b2b1e301bed2e080fb835aece6d2644b1ca3b5b673b34617bc6c0f378307d5a
-
SHA512
faf4ba5cf6f5782b9b4dea6e2320ef6dfc207c011682f03b90a3430b43844c18ca3b2634ff040783f7575f065794284968185d86639dec48c3fac3febf10a872
-
SSDEEP
12288:uxHjL99LsEONTlqagN59/2MzTcDYOtygo2ZJTaR6fHl6vKP2rUi6K6aKUUifD0:aL99wBTlqagH12OcDYOogo23WR6fJPSK
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-