Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ea5a0801207bcb3a591cf2ab56ccd60a5686a44f782e14adc40ae3b8d6b3340c
-
Size
156KB
-
Sample
240329-e7f7baae54
-
MD5
6d035cd36404310dfe1ac3e8d928a607
-
SHA1
d63bf42c2da1ff024766f15ee8ecc6b888423661
-
SHA256
ea5a0801207bcb3a591cf2ab56ccd60a5686a44f782e14adc40ae3b8d6b3340c
-
SHA512
a7d4e305345635ed760f7d9af170caf1a2e14aa9003dbdef2219010819a5d214097ad57655c9b89b05acaa5c7da181b57fe24f9a5409bffe31c848223d21b079
-
SSDEEP
1536:zTkumWuYdRBU8gRDGHPOGMmUbaxGAka+t/K9rCGaV9mw7Jqx8M+dzAb9QgRV5:aWuYda4UbaxqkCGaVD7JqfKAbGo5
Static task
static1
Behavioral task
behavioral1
Sample
ea5a0801207bcb3a591cf2ab56ccd60a5686a44f782e14adc40ae3b8d6b3340c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea5a0801207bcb3a591cf2ab56ccd60a5686a44f782e14adc40ae3b8d6b3340c.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
ea5a0801207bcb3a591cf2ab56ccd60a5686a44f782e14adc40ae3b8d6b3340c
-
Size
156KB
-
MD5
6d035cd36404310dfe1ac3e8d928a607
-
SHA1
d63bf42c2da1ff024766f15ee8ecc6b888423661
-
SHA256
ea5a0801207bcb3a591cf2ab56ccd60a5686a44f782e14adc40ae3b8d6b3340c
-
SHA512
a7d4e305345635ed760f7d9af170caf1a2e14aa9003dbdef2219010819a5d214097ad57655c9b89b05acaa5c7da181b57fe24f9a5409bffe31c848223d21b079
-
SSDEEP
1536:zTkumWuYdRBU8gRDGHPOGMmUbaxGAka+t/K9rCGaV9mw7Jqx8M+dzAb9QgRV5:aWuYda4UbaxqkCGaVD7JqfKAbGo5
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-