Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
8ce7bceeb052888440fc39060a77914295b8d8285ea3df761bda5a3e2e869e87
-
Size
975KB
-
Sample
240306-1kd94aac56
-
MD5
a5deab985f7e9fbdfa07a048effafbc4
-
SHA1
9aa8b079047ad97334161055406061475e3721b4
-
SHA256
8ce7bceeb052888440fc39060a77914295b8d8285ea3df761bda5a3e2e869e87
-
SHA512
f0c7166a3867f8cefc9ba3ba2dfdad3a39120cb8132b91f4465ab9794855648854c945f512e8b750335568f3644565905b80a37d31bdd712a7e78e436f32b583
-
SSDEEP
24576:bSLcL4Q0w+97NqlPLM4lZmuMaWa2y7VDsR:bj8QM9Moc+a2y7m
Behavioral task
behavioral1
Sample
8ce7bceeb052888440fc39060a77914295b8d8285ea3df761bda5a3e2e869e87.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8ce7bceeb052888440fc39060a77914295b8d8285ea3df761bda5a3e2e869e87.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
8ce7bceeb052888440fc39060a77914295b8d8285ea3df761bda5a3e2e869e87
-
Size
975KB
-
MD5
a5deab985f7e9fbdfa07a048effafbc4
-
SHA1
9aa8b079047ad97334161055406061475e3721b4
-
SHA256
8ce7bceeb052888440fc39060a77914295b8d8285ea3df761bda5a3e2e869e87
-
SHA512
f0c7166a3867f8cefc9ba3ba2dfdad3a39120cb8132b91f4465ab9794855648854c945f512e8b750335568f3644565905b80a37d31bdd712a7e78e436f32b583
-
SSDEEP
24576:bSLcL4Q0w+97NqlPLM4lZmuMaWa2y7VDsR:bj8QM9Moc+a2y7m
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-