Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3b709e0b51a88c065fd3ce94b273a8c0N.exe
-
Size
352KB
-
Sample
240724-c2dg5awgjf
-
MD5
3b709e0b51a88c065fd3ce94b273a8c0
-
SHA1
760e3d96d374742cdd79885e45130ec7099edbfa
-
SHA256
c5743e160fc577de7420d7f7986f72d28269404f4a8593b0cc98da2ce7512c68
-
SHA512
b6caad0b2ff0432ad9589bbaf1ef21f496fce80fc1e3238e6f216d949c25649f714fe238e874314a3b1533bab827b486f8df5d417d1984c45568c16014bccadf
-
SSDEEP
6144:IIs9OKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7zjPFsEPAsKCe8i:RKofHfHTXQLzgvnzHPowYbvrjD/L7QPs
Static task
static1
Behavioral task
behavioral1
Sample
3b709e0b51a88c065fd3ce94b273a8c0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b709e0b51a88c065fd3ce94b273a8c0N.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
3b709e0b51a88c065fd3ce94b273a8c0N.exe
-
Size
352KB
-
MD5
3b709e0b51a88c065fd3ce94b273a8c0
-
SHA1
760e3d96d374742cdd79885e45130ec7099edbfa
-
SHA256
c5743e160fc577de7420d7f7986f72d28269404f4a8593b0cc98da2ce7512c68
-
SHA512
b6caad0b2ff0432ad9589bbaf1ef21f496fce80fc1e3238e6f216d949c25649f714fe238e874314a3b1533bab827b486f8df5d417d1984c45568c16014bccadf
-
SSDEEP
6144:IIs9OKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7zjPFsEPAsKCe8i:RKofHfHTXQLzgvnzHPowYbvrjD/L7QPs
Score8/10-
Drops file in Drivers directory
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
-