Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Deushack.exe
-
Size
974KB
-
Sample
240711-ya42na1cjr
-
MD5
aa5c5e8b48622d3b6d80e94f54110e61
-
SHA1
7c1e0adac8a1dfe992793108d59814cd0b6aac8d
-
SHA256
8c7fd0a4bc551502bc5fde36c37617bbb4c6c6d1588e554f60de0ea281eae28d
-
SHA512
f6df3b8fe36d3974601e5b60ffd6980db743ecf7b5a2eb6ed00ad304846d527d3fd0e9e9b548378605cefa899ef9a917984d904c7a94bb0ec6e99859ee20cf59
-
SSDEEP
24576:TLc6V9iFn4GFME6gFBxVXuNqjBs3MBAj0TEjOF8/:TfycKVAqjBsMC
Static task
static1
Malware Config
Targets
-
-
Target
Deushack.exe
-
Size
974KB
-
MD5
aa5c5e8b48622d3b6d80e94f54110e61
-
SHA1
7c1e0adac8a1dfe992793108d59814cd0b6aac8d
-
SHA256
8c7fd0a4bc551502bc5fde36c37617bbb4c6c6d1588e554f60de0ea281eae28d
-
SHA512
f6df3b8fe36d3974601e5b60ffd6980db743ecf7b5a2eb6ed00ad304846d527d3fd0e9e9b548378605cefa899ef9a917984d904c7a94bb0ec6e99859ee20cf59
-
SSDEEP
24576:TLc6V9iFn4GFME6gFBxVXuNqjBs3MBAj0TEjOF8/:TfycKVAqjBsMC
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-