Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
dfb302bfe2528e489185cc87b2227de3
-
Size
123KB
-
Sample
240326-vw981sfc84
-
MD5
dfb302bfe2528e489185cc87b2227de3
-
SHA1
ff7233ad153e909de680ba4ee447f79b440257db
-
SHA256
50dd0b8abea5688d7633b40d5722909535101cf816bff9b77a65cbb0764ac80d
-
SHA512
de75d925831a1fff402d1a60342e9126971ad2adb15ff7dcd2d75a82fc6bf4dd060d7e8210de59873fa71e78e9a69c19a231d789c4f41e157fa0c8242e51edf3
-
SSDEEP
3072:OeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLLtK:OVYrJrOSsRwcpLK
Behavioral task
behavioral1
Sample
dfb302bfe2528e489185cc87b2227de3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dfb302bfe2528e489185cc87b2227de3.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
dfb302bfe2528e489185cc87b2227de3
-
Size
123KB
-
MD5
dfb302bfe2528e489185cc87b2227de3
-
SHA1
ff7233ad153e909de680ba4ee447f79b440257db
-
SHA256
50dd0b8abea5688d7633b40d5722909535101cf816bff9b77a65cbb0764ac80d
-
SHA512
de75d925831a1fff402d1a60342e9126971ad2adb15ff7dcd2d75a82fc6bf4dd060d7e8210de59873fa71e78e9a69c19a231d789c4f41e157fa0c8242e51edf3
-
SSDEEP
3072:OeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLLtK:OVYrJrOSsRwcpLK
Score8/10-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-