Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
32df8c49d6f89722c6aca8943883cfff3cdf34074e87ff48f7c96da5d732c02b
-
Size
1.3MB
-
Sample
240410-l9pd2afa9v
-
MD5
5ff286fb753adf61b58b9dadf46b833c
-
SHA1
d3432e91b046cc73df0b672249182aaf40e78d6c
-
SHA256
32df8c49d6f89722c6aca8943883cfff3cdf34074e87ff48f7c96da5d732c02b
-
SHA512
1e7c101fb1cc9e6bd5f753c4d85d033eb1ea1a2c9dc47bb6a8233b1d3ad84ecde1569dac2a58e52c2675db831cae4e730285b1416eebbb89a7800ab6b0109b96
-
SSDEEP
24576:QgIUq66bU9FujVDgk4VPBiL1EcLILJD6iVqtbBFYBoS3rxGW2Xkdg3l5TW:QDUqFw9FcDH4t0L1EcLSJDBqLFUoS3Ia
Static task
static1
Behavioral task
behavioral1
Sample
РАСПОРЯЖЕНИЕ_ГЛАВНОГО_УПРАВЛЕНИЯ-РЖД.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
РАСПОРЯЖЕНИЕ_ГЛАВНОГО_УПРАВЛЕНИЯ-РЖД.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
РАСПОРЯЖЕНИЕ_ГЛАВНОГО_УПРАВЛЕНИЯ-РЖД.exe
-
Size
1.5MB
-
MD5
754bfba24b12db4bcbb9c241baaa2557
-
SHA1
439ccde358d0a93da24cd2049d0a48d760732bca
-
SHA256
a9799ed289b967be92f920616015e58ae6e27defaa48f377d3cd701d0915fe53
-
SHA512
b5860b0ff23de57415b6b40d5852ee8f1cbd94cf0e0fcdd774cc9952052e172ccc75768a49ba4d93059e9904a3e5edacdf698036e3b2bb4f5ceb5d1c895455ea
-
SSDEEP
24576:WKWseKuCdU9rkNPfgkGP5B8ZbiELKLVj6iDyHBzZKpiE3XxoW2X0Fk3l1pm:TFzDW9rIfHGhSZbiELAVjvyxZmiE3Oi5
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-