Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c4a6a667d280bf58172d70b5cc2ab283
-
Size
104KB
-
Sample
240313-b47cjsha91
-
MD5
c4a6a667d280bf58172d70b5cc2ab283
-
SHA1
591be136c30f6141ca137fb5259fc0d1e1e8c956
-
SHA256
6fdf71cc2e23c89add7da89bd3960d20f65ab166d5d3facdb739bde5950d3df2
-
SHA512
2e2dc85a4c4e6a61a1d666d23d1aec9244725e83a25d960fc641acf65e8ce2e51402791bc2af74c697472b1a3f852e371a0a4de955013d04dc90c3d04355705b
-
SSDEEP
1536:S6HGhwSsky22UJ826eeJo5FRfW5RWTiXJ3j++PObZJTA5:S6HGhGkckeJoFfYWTiXJ3i+AZJ
Static task
static1
Behavioral task
behavioral1
Sample
c4a6a667d280bf58172d70b5cc2ab283.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c4a6a667d280bf58172d70b5cc2ab283.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
c4a6a667d280bf58172d70b5cc2ab283
-
Size
104KB
-
MD5
c4a6a667d280bf58172d70b5cc2ab283
-
SHA1
591be136c30f6141ca137fb5259fc0d1e1e8c956
-
SHA256
6fdf71cc2e23c89add7da89bd3960d20f65ab166d5d3facdb739bde5950d3df2
-
SHA512
2e2dc85a4c4e6a61a1d666d23d1aec9244725e83a25d960fc641acf65e8ce2e51402791bc2af74c697472b1a3f852e371a0a4de955013d04dc90c3d04355705b
-
SSDEEP
1536:S6HGhwSsky22UJ826eeJo5FRfW5RWTiXJ3j++PObZJTA5:S6HGhGkckeJoFfYWTiXJ3i+AZJ
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-