Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
abd0dafb3aaea8a512f51a4f7825559b3fe592c71db93037c5f322245c284253
-
Size
7.3MB
-
Sample
240723-2krqvswcld
-
MD5
58dae76cc8de8d43c761a0e496bc7363
-
SHA1
41900ebf3454544999df4bd12637c3942e1bfe53
-
SHA256
abd0dafb3aaea8a512f51a4f7825559b3fe592c71db93037c5f322245c284253
-
SHA512
a19274c50bd28b7f27c62c3e47ef2050e6d4831c2b42625f91b42a67012255c5957f47615bb984f8cb058d6a68462498076159e4269750242fcf7e74bc939039
-
SSDEEP
196608:91OWadibtmJ9kObrP2/xt6WEb8Tu7BVUGeBw4c9gH:3OWSiJmJxPCxt6p8rWe
Static task
static1
Behavioral task
behavioral1
Sample
abd0dafb3aaea8a512f51a4f7825559b3fe592c71db93037c5f322245c284253.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
abd0dafb3aaea8a512f51a4f7825559b3fe592c71db93037c5f322245c284253.exe
Resource
win11-20240709-en
Malware Config
Targets
-
-
Target
abd0dafb3aaea8a512f51a4f7825559b3fe592c71db93037c5f322245c284253
-
Size
7.3MB
-
MD5
58dae76cc8de8d43c761a0e496bc7363
-
SHA1
41900ebf3454544999df4bd12637c3942e1bfe53
-
SHA256
abd0dafb3aaea8a512f51a4f7825559b3fe592c71db93037c5f322245c284253
-
SHA512
a19274c50bd28b7f27c62c3e47ef2050e6d4831c2b42625f91b42a67012255c5957f47615bb984f8cb058d6a68462498076159e4269750242fcf7e74bc939039
-
SSDEEP
196608:91OWadibtmJ9kObrP2/xt6WEb8Tu7BVUGeBw4c9gH:3OWSiJmJxPCxt6p8rWe
-
Blocklisted process makes network request
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indirect Command Execution
Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-