Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
WinToolkit.exe
-
Size
17.1MB
-
Sample
240524-srkfpaad6w
-
MD5
86e3765bd385c07ee8130bcc8818b0f7
-
SHA1
3132600be547a702097dbd92d852c0e2d9893086
-
SHA256
9df3185347ef7d85e2252dbb233369bd1183bf969e65413d07867cb6975509ab
-
SHA512
ebca9fc505e6357349c92e971fcc55a2e3db2fac1abe0bac22a7d296e10957f9c28cef2c76841dc8ef8bd2bf497bec144df6284cb2c8628d738b3627670ae1e0
-
SSDEEP
393216:Rn2R47DAB2HsdCjoZO/0Va7yMDudoP65kL2FA3CBcTeN4fKp0bm1QHSxsjO9Iva3:Rn2R47DAB2HsdCjoZO/0Va7yMDudoP6X
Static task
static1
Behavioral task
behavioral1
Sample
WinToolkit.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
WinToolkit.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
WinToolkit.exe
-
Size
17.1MB
-
MD5
86e3765bd385c07ee8130bcc8818b0f7
-
SHA1
3132600be547a702097dbd92d852c0e2d9893086
-
SHA256
9df3185347ef7d85e2252dbb233369bd1183bf969e65413d07867cb6975509ab
-
SHA512
ebca9fc505e6357349c92e971fcc55a2e3db2fac1abe0bac22a7d296e10957f9c28cef2c76841dc8ef8bd2bf497bec144df6284cb2c8628d738b3627670ae1e0
-
SSDEEP
393216:Rn2R47DAB2HsdCjoZO/0Va7yMDudoP65kL2FA3CBcTeN4fKp0bm1QHSxsjO9Iva3:Rn2R47DAB2HsdCjoZO/0Va7yMDudoP6X
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
-