Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
_Getintopc.com_Shadow_Defender_1.5.0.726.rar
-
Size
3.9MB
-
Sample
240615-v2byeasemr
-
MD5
4f413413d826637184d384e35d34f98a
-
SHA1
89d7270d76d4789111a701bc4e85ac0e43f69c45
-
SHA256
444e4f94756e7094b2dced1bf728874ffae492d6c5e306232c1e162c470eaada
-
SHA512
ca55eefd76e735dead58fb7a31693e749d677ed75fc6488ddc1e9fc4187804f08dfd0a38e44807129eb206c36efb0411ca08e98ff34c2b021f58197e8507e240
-
SSDEEP
98304:q1lY8xKHQ1ILuTFOIp4MqH7fjNcOyY7GJ7MqEAmjqtvXA11ukvZn:qQkKYcuc5Mqb7R72x0OEvhn
Static task
static1
Behavioral task
behavioral1
Sample
_Getintopc.com_Shadow_Defender_1.5.0.726.rar
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
_Getintopc.com_Shadow_Defender_1.5.0.726.rar
-
Size
3.9MB
-
MD5
4f413413d826637184d384e35d34f98a
-
SHA1
89d7270d76d4789111a701bc4e85ac0e43f69c45
-
SHA256
444e4f94756e7094b2dced1bf728874ffae492d6c5e306232c1e162c470eaada
-
SHA512
ca55eefd76e735dead58fb7a31693e749d677ed75fc6488ddc1e9fc4187804f08dfd0a38e44807129eb206c36efb0411ca08e98ff34c2b021f58197e8507e240
-
SSDEEP
98304:q1lY8xKHQ1ILuTFOIp4MqH7fjNcOyY7GJ7MqEAmjqtvXA11ukvZn:qQkKYcuc5Mqb7R72x0OEvhn
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Registers COM server for autorun
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-