Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
abed2a9120f50e91f1770036ad4ad4b0N.exe
-
Size
500KB
-
Sample
240722-n533qsweph
-
MD5
abed2a9120f50e91f1770036ad4ad4b0
-
SHA1
02560252e65c440293ecbc6aeb9e1696c5489ffe
-
SHA256
eb0d3f0eb2f3ec034585e14dd757bcd5d8d18e614dbfbf9ceef04738c5df6970
-
SHA512
856e7c17297a27a81b9fb477cac9684cad20b2d1dd4a5f3d096dd74f96ff43a45cb06f7e4f34c3d8528d6b6b3daeb5ff5a9fcd1a75de6d58406135025692ca7f
-
SSDEEP
6144:5DnLOwy4tHrz1OScjENww0vg0zmsmgMcx/hUtPoFjdz5ht7pOZ520TPS3t/0Roue:5DLOzkHrz1Zcs0vXPflSCtOwAouJCQc
Static task
static1
Behavioral task
behavioral1
Sample
abed2a9120f50e91f1770036ad4ad4b0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
abed2a9120f50e91f1770036ad4ad4b0N.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
abed2a9120f50e91f1770036ad4ad4b0N.exe
-
Size
500KB
-
MD5
abed2a9120f50e91f1770036ad4ad4b0
-
SHA1
02560252e65c440293ecbc6aeb9e1696c5489ffe
-
SHA256
eb0d3f0eb2f3ec034585e14dd757bcd5d8d18e614dbfbf9ceef04738c5df6970
-
SHA512
856e7c17297a27a81b9fb477cac9684cad20b2d1dd4a5f3d096dd74f96ff43a45cb06f7e4f34c3d8528d6b6b3daeb5ff5a9fcd1a75de6d58406135025692ca7f
-
SSDEEP
6144:5DnLOwy4tHrz1OScjENww0vg0zmsmgMcx/hUtPoFjdz5ht7pOZ520TPS3t/0Roue:5DLOzkHrz1Zcs0vXPflSCtOwAouJCQc
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-