Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
VPNGate.rar
-
Size
115.6MB
-
Sample
240312-hkqn1sah6z
-
MD5
f411e4d6891b6f33dae4eaff742f5ba5
-
SHA1
ceeec5a98b87290711ac62c86a5f14c94cd20997
-
SHA256
59f0048fd919cde880634de447cd5a2772a4fd1aa9e87523a07239eadaf53096
-
SHA512
a52cb37cb42eb00655eb8a216df3173a40ce94dd01836a3fbe8538ffb4f3220cdb891fc47dad53542f0afd811d3a8a4a85d0edd9d79cbd570e766c5d8087c297
-
SSDEEP
3145728:hz2YHxpPOELQfpZCUHsKmXhDD1k79xig9n66/1mf:R2ExJLugS6h9k7Sgv/Yf
Static task
static1
Behavioral task
behavioral1
Sample
VPNGate.rar
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
VPNGate.rar
-
Size
115.6MB
-
MD5
f411e4d6891b6f33dae4eaff742f5ba5
-
SHA1
ceeec5a98b87290711ac62c86a5f14c94cd20997
-
SHA256
59f0048fd919cde880634de447cd5a2772a4fd1aa9e87523a07239eadaf53096
-
SHA512
a52cb37cb42eb00655eb8a216df3173a40ce94dd01836a3fbe8538ffb4f3220cdb891fc47dad53542f0afd811d3a8a4a85d0edd9d79cbd570e766c5d8087c297
-
SSDEEP
3145728:hz2YHxpPOELQfpZCUHsKmXhDD1k79xig9n66/1mf:R2ExJLugS6h9k7Sgv/Yf
Score8/10-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-