Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
5e4828ecaf8f92f7ea48b587bb447afd58c59059a1f2a533dee5fce042348b81
-
Size
694KB
-
Sample
240406-1chybabe2v
-
MD5
59a68276b9f49e4e23a84b6306c31bfa
-
SHA1
2a94a16b4fa94ad1fa7bae51891b7006c2c2f650
-
SHA256
5e4828ecaf8f92f7ea48b587bb447afd58c59059a1f2a533dee5fce042348b81
-
SHA512
15fe81ce83a5c03dc9a7f47ab64394a337cd1bf4d0a72780e911d4efbbb7eac0defbd544db9ebd00615095b4b8bfcd100564acb7f679c514fd435e3012795415
-
SSDEEP
12288:A8EQoSMvDOTtbrlXjNa899ubYXFuex0BvlTz7Xw+TZDjcwF3UkJq:A8kDmtnlXjNa8vuk5CvJogdjBOkJq
Behavioral task
behavioral1
Sample
5e4828ecaf8f92f7ea48b587bb447afd58c59059a1f2a533dee5fce042348b81.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5e4828ecaf8f92f7ea48b587bb447afd58c59059a1f2a533dee5fce042348b81.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
5e4828ecaf8f92f7ea48b587bb447afd58c59059a1f2a533dee5fce042348b81
-
Size
694KB
-
MD5
59a68276b9f49e4e23a84b6306c31bfa
-
SHA1
2a94a16b4fa94ad1fa7bae51891b7006c2c2f650
-
SHA256
5e4828ecaf8f92f7ea48b587bb447afd58c59059a1f2a533dee5fce042348b81
-
SHA512
15fe81ce83a5c03dc9a7f47ab64394a337cd1bf4d0a72780e911d4efbbb7eac0defbd544db9ebd00615095b4b8bfcd100564acb7f679c514fd435e3012795415
-
SSDEEP
12288:A8EQoSMvDOTtbrlXjNa899ubYXFuex0BvlTz7Xw+TZDjcwF3UkJq:A8kDmtnlXjNa8vuk5CvJogdjBOkJq
Score9/10-
Detects executables containing possible sandbox analysis VM usernames
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-