Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9308ea3ebaf4d39f8cb5f29b015cf0064f73170d61226a5f9b5b7c28173bc402.zip
-
Size
3.5MB
-
Sample
240724-bm9fkssgqb
-
MD5
b71d65468aceda690b0fc474f89a4d13
-
SHA1
a67983b6ace054ced0812df12b5414c7de5441a4
-
SHA256
5f597c276fd54188aac6ab9e2975a4d1dafac80d365a05c836bf92777a6af623
-
SHA512
d51c83bc83718e31c7b090aaf653bb1d96f26aaffcfb5f3db946e21f6f98c6efa0fe25fd456cbfc3856929c11ed100674f3cdab51031ac0e87b01b6693d51e65
-
SSDEEP
98304:fylSFOYBXVAnT+tWgdfflDPyE13op4LF+lXv5mSsa:dsUVgSttdft7yE1l+f5mSsa
Static task
static1
Behavioral task
behavioral1
Sample
9308ea3ebaf4d39f8cb5f29b015cf0064f73170d61226a5f9b5b7c28173bc402.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9308ea3ebaf4d39f8cb5f29b015cf0064f73170d61226a5f9b5b7c28173bc402.exe
Resource
win10v2004-20240709-en
Malware Config
Extracted
C:\Users\Admin\Desktop\ReadMe.txt
Targets
-
-
Target
9308ea3ebaf4d39f8cb5f29b015cf0064f73170d61226a5f9b5b7c28173bc402
-
Size
7.0MB
-
MD5
2e74557d1ac847575f10650b8dd13276
-
SHA1
0e937f3b1a770bbc4fd28cdf330d9b217ab34062
-
SHA256
9308ea3ebaf4d39f8cb5f29b015cf0064f73170d61226a5f9b5b7c28173bc402
-
SHA512
fe2651014bc17cf37b1f947e25b898f0c9ee35a2b2fcfe3d247b43854c4430dabc372f16eff03c1eb7f16d0a2c55778d209020023042e4715b8f6fbaf8493692
-
SSDEEP
98304:6K8JmgV5fPcYE+/3q+PO0b+ISWAR66ga2v8j:6MgV5f4aiPISWAVgp
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-