Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b80bda13861a240dce8695573fe38a5ede6319e6c96a8b52e9d1d54552edcaf7
-
Size
670KB
-
Sample
240409-b1cc1adh4x
-
MD5
15861d1278c16eeaefc7829c95067ff7
-
SHA1
02b98a26753da7e5886bce1048875c085b8b970f
-
SHA256
b80bda13861a240dce8695573fe38a5ede6319e6c96a8b52e9d1d54552edcaf7
-
SHA512
001d09b08de15f9bdbfebd6a515cdff50c7068bd6420095de91877000dac1cdfd95e11f0a2a68a2a60231cdb6465bf582efa10517632308d0036ca00897521b9
-
SSDEEP
12288:lXa8smf49kRMcBrNF6xVfs35BssQPx8Pq6UTdUV1eetulMsN/h:lq8zRMcrUlkMFPx8YimQulMsFh
Static task
static1
Behavioral task
behavioral1
Sample
b80bda13861a240dce8695573fe38a5ede6319e6c96a8b52e9d1d54552edcaf7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b80bda13861a240dce8695573fe38a5ede6319e6c96a8b52e9d1d54552edcaf7.exe
Resource
win10v2004-20240319-en
Malware Config
Targets
-
-
Target
b80bda13861a240dce8695573fe38a5ede6319e6c96a8b52e9d1d54552edcaf7
-
Size
670KB
-
MD5
15861d1278c16eeaefc7829c95067ff7
-
SHA1
02b98a26753da7e5886bce1048875c085b8b970f
-
SHA256
b80bda13861a240dce8695573fe38a5ede6319e6c96a8b52e9d1d54552edcaf7
-
SHA512
001d09b08de15f9bdbfebd6a515cdff50c7068bd6420095de91877000dac1cdfd95e11f0a2a68a2a60231cdb6465bf582efa10517632308d0036ca00897521b9
-
SSDEEP
12288:lXa8smf49kRMcBrNF6xVfs35BssQPx8Pq6UTdUV1eetulMsN/h:lq8zRMcrUlkMFPx8YimQulMsFh
Score9/10-
Detects executables containing possible sandbox analysis VM usernames
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-