Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
virussign.com_9d0c08e9397f1b734de76cfce378f320.vir
-
Size
12KB
-
Sample
240528-wjgllsea9w
-
MD5
9d0c08e9397f1b734de76cfce378f320
-
SHA1
bae676d1e7c3fe8d86bb252e040087a35f9c965e
-
SHA256
fc7291766af24760ecc65ce9ea7e342ded300d8d7f4c883b7055ec0f060ecaf5
-
SHA512
7587af76f33e1013a3336f84e23deaedf4d95d218f657c5bf3dd4da452c3291a267f9cc5c87e70921e1cb25005589aa165b410afd1e7fdc2e762dac3ddca0f01
-
SSDEEP
384:1L7li/2zxq2DcEQvdhcJKLTp/NK9xa+E:VxM/Q9c+E
Static task
static1
Behavioral task
behavioral1
Sample
virussign.com_9d0c08e9397f1b734de76cfce378f320.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
virussign.com_9d0c08e9397f1b734de76cfce378f320.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
virussign.com_9d0c08e9397f1b734de76cfce378f320.vir
-
Size
12KB
-
MD5
9d0c08e9397f1b734de76cfce378f320
-
SHA1
bae676d1e7c3fe8d86bb252e040087a35f9c965e
-
SHA256
fc7291766af24760ecc65ce9ea7e342ded300d8d7f4c883b7055ec0f060ecaf5
-
SHA512
7587af76f33e1013a3336f84e23deaedf4d95d218f657c5bf3dd4da452c3291a267f9cc5c87e70921e1cb25005589aa165b410afd1e7fdc2e762dac3ddca0f01
-
SSDEEP
384:1L7li/2zxq2DcEQvdhcJKLTp/NK9xa+E:VxM/Q9c+E
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-