Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fe3ebb119e7bd9e91658002fbfd24536e396b820bda0b32a38201c5a479185b6
-
Size
1.4MB
-
Sample
240328-gpbvzsef3t
-
MD5
6a29b68b8faec28cac8caf26631100f2
-
SHA1
f5224f9256b3e2e665de25103c1df18b04d9c2bd
-
SHA256
fe3ebb119e7bd9e91658002fbfd24536e396b820bda0b32a38201c5a479185b6
-
SHA512
333f2341c1093dc68e15a9b098d6898a3a85bfb25e7ae59f478acc9ffac8246cd806d6d4edd890e072f43213de667b17edb5a30189000e443f676a566a123ce5
-
SSDEEP
24576:gg8KC/B1FBgDXZNFfZoWe0KVIC9ClKa5IrykTHhQ5NoRyftZZriXWzr6pfKuI/rH:gKm1rgXteP3Vz9oI2mhoNosVDP+fXS
Static task
static1
Behavioral task
behavioral1
Sample
fe3ebb119e7bd9e91658002fbfd24536e396b820bda0b32a38201c5a479185b6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe3ebb119e7bd9e91658002fbfd24536e396b820bda0b32a38201c5a479185b6.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
fe3ebb119e7bd9e91658002fbfd24536e396b820bda0b32a38201c5a479185b6
-
Size
1.4MB
-
MD5
6a29b68b8faec28cac8caf26631100f2
-
SHA1
f5224f9256b3e2e665de25103c1df18b04d9c2bd
-
SHA256
fe3ebb119e7bd9e91658002fbfd24536e396b820bda0b32a38201c5a479185b6
-
SHA512
333f2341c1093dc68e15a9b098d6898a3a85bfb25e7ae59f478acc9ffac8246cd806d6d4edd890e072f43213de667b17edb5a30189000e443f676a566a123ce5
-
SSDEEP
24576:gg8KC/B1FBgDXZNFfZoWe0KVIC9ClKa5IrykTHhQ5NoRyftZZriXWzr6pfKuI/rH:gKm1rgXteP3Vz9oI2mhoNosVDP+fXS
Score8/10-
Modifies AppInit DLL entries
-
Modifies Installed Components in the registry
-
Sets file execution options in registry
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Registers COM server for autorun
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-