Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ChilledWindows.GUI.exe
-
Size
4.3MB
-
Sample
240312-wnk5lahf59
-
MD5
74ff57825e5256a5e145c246bdf55a48
-
SHA1
a09c4666725ee3791a46018899c977747751003c
-
SHA256
1ffaef081b66fba6d95e34d3c7c70b6958f6f76702bea07205162bba32387b1a
-
SHA512
207a63aef56a8941e2560be4242c107e93fa108f837dca59d04092b295cc685d7848840c8920ac7e415671d5902bf080b4ff8bcddfc88182315d9da4c8d39515
-
SSDEEP
98304:U3on4k4113jdraOptUIQu8GMuwxzrH+zpCYP/KTAurli:U3on4HjtUT3kUrHG0a
Static task
static1
Behavioral task
behavioral1
Sample
ChilledWindows.GUI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ChilledWindows.GUI.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
ChilledWindows.GUI.exe
-
Size
4.3MB
-
MD5
74ff57825e5256a5e145c246bdf55a48
-
SHA1
a09c4666725ee3791a46018899c977747751003c
-
SHA256
1ffaef081b66fba6d95e34d3c7c70b6958f6f76702bea07205162bba32387b1a
-
SHA512
207a63aef56a8941e2560be4242c107e93fa108f837dca59d04092b295cc685d7848840c8920ac7e415671d5902bf080b4ff8bcddfc88182315d9da4c8d39515
-
SSDEEP
98304:U3on4k4113jdraOptUIQu8GMuwxzrH+zpCYP/KTAurli:U3on4HjtUT3kUrHG0a
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-