Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
PlantsVsZombiesSetup_instalador.exe
-
Size
40.8MB
-
Sample
240708-gehksavepr
-
MD5
95c188d0e4bff425431bcdfd49d06d25
-
SHA1
c46979be135ef1c486144fa062466cdc51b740f5
-
SHA256
4b4bb4d19fb639e5698983e39d7ad061c7667bcec19056560532c7ad0d67d0e4
-
SHA512
804943b85f968cea2cbc9f0f7a2d55c5d53d00d777e251f6662c60172a3bd8017c4de6ce17d25f58dd8d3031f86f025727f7fa31859eeb50b755a2f61570c839
-
SSDEEP
786432:kz5Jx9wem1r+qHk/rYmfZ6f8/39RsAaZh9BLTtYHmc9iLMnH:kz5Jzi0ZfZP9iAsBLBYHv6eH
Static task
static1
Behavioral task
behavioral1
Sample
PlantsVsZombiesSetup_instalador.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
PlantsVsZombiesSetup_instalador.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
PlantsVsZombiesSetup_instalador.exe
-
Size
40.8MB
-
MD5
95c188d0e4bff425431bcdfd49d06d25
-
SHA1
c46979be135ef1c486144fa062466cdc51b740f5
-
SHA256
4b4bb4d19fb639e5698983e39d7ad061c7667bcec19056560532c7ad0d67d0e4
-
SHA512
804943b85f968cea2cbc9f0f7a2d55c5d53d00d777e251f6662c60172a3bd8017c4de6ce17d25f58dd8d3031f86f025727f7fa31859eeb50b755a2f61570c839
-
SSDEEP
786432:kz5Jx9wem1r+qHk/rYmfZ6f8/39RsAaZh9BLTtYHmc9iLMnH:kz5Jzi0ZfZP9iAsBLBYHv6eH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-