Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Ziraat Bankası Swift Mesaji2.bat.exe
-
Size
1.1MB
-
Sample
240428-kxq7escd4v
-
MD5
e4df9a487d5c234c9bf5d406596404bf
-
SHA1
8111cc21c3fcd1ea98e398e92f190ce98769f3e5
-
SHA256
db83be38acf27d84834da055d570805c8710fbef271e827ca8a645b989c70be8
-
SHA512
379e55976e6e5d9ddc1bdeb30dda8b04f75a827862af26f3670dd53039a0aac11e79e76517ff4281b17a1e7be0832e5be8120088729cb67036e388517fcb7c65
-
SSDEEP
24576:sfPjKr5BNDRLpxLMD/wc2IUbvYuWtu0uSJ6fd9tOF3kF:uk5BN9TLlLIx5truxf5IUF
Static task
static1
Behavioral task
behavioral1
Sample
Ziraat Bankası Swift Mesaji2.bat.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Ziraat Bankası Swift Mesaji2.bat.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
Ziraat Bankası Swift Mesaji2.bat.exe
-
Size
1.1MB
-
MD5
e4df9a487d5c234c9bf5d406596404bf
-
SHA1
8111cc21c3fcd1ea98e398e92f190ce98769f3e5
-
SHA256
db83be38acf27d84834da055d570805c8710fbef271e827ca8a645b989c70be8
-
SHA512
379e55976e6e5d9ddc1bdeb30dda8b04f75a827862af26f3670dd53039a0aac11e79e76517ff4281b17a1e7be0832e5be8120088729cb67036e388517fcb7c65
-
SSDEEP
24576:sfPjKr5BNDRLpxLMD/wc2IUbvYuWtu0uSJ6fd9tOF3kF:uk5BN9TLlLIx5truxf5IUF
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-