Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
489ea846f892d2eb3bd097dcc52f7d52d9f91caf82c956d0bce528b32c45a749
-
Size
160KB
-
Sample
240419-zy9gqagd3z
-
MD5
02403d610d70d5bdb9cd5435a95fa131
-
SHA1
15d6ed60f1b4df30a8d0ac62529a783e807b1b45
-
SHA256
489ea846f892d2eb3bd097dcc52f7d52d9f91caf82c956d0bce528b32c45a749
-
SHA512
edb5395efb5b1e4804d7e2ab764d3e2d5413110d74ae9f891bc3384b14e00c683e96c522994ef8b5c94cd9e7ebcbd2e7552573fb0135d2279bf6fe3788525de3
-
SSDEEP
768:YJXL+uSmvNAci2FhoJ0h4h2hQJVNjDkp57xXp5Rmg5Fh4hqhxOhDhzhnhvhzhOhs:Y9qhcimJh4h2hON6x5puwVT0B
Static task
static1
Behavioral task
behavioral1
Sample
489ea846f892d2eb3bd097dcc52f7d52d9f91caf82c956d0bce528b32c45a749.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
489ea846f892d2eb3bd097dcc52f7d52d9f91caf82c956d0bce528b32c45a749.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
489ea846f892d2eb3bd097dcc52f7d52d9f91caf82c956d0bce528b32c45a749
-
Size
160KB
-
MD5
02403d610d70d5bdb9cd5435a95fa131
-
SHA1
15d6ed60f1b4df30a8d0ac62529a783e807b1b45
-
SHA256
489ea846f892d2eb3bd097dcc52f7d52d9f91caf82c956d0bce528b32c45a749
-
SHA512
edb5395efb5b1e4804d7e2ab764d3e2d5413110d74ae9f891bc3384b14e00c683e96c522994ef8b5c94cd9e7ebcbd2e7552573fb0135d2279bf6fe3788525de3
-
SSDEEP
768:YJXL+uSmvNAci2FhoJ0h4h2hQJVNjDkp57xXp5Rmg5Fh4hqhxOhDhzhnhvhzhOhs:Y9qhcimJh4h2hON6x5puwVT0B
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-