Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Setup (1).msi
-
Size
4.4MB
-
Sample
240725-wr98wsyhka
-
MD5
c4de73561e5d359aee3e8626434f95c7
-
SHA1
1020b4a315ddc4dfd4132315a98b0a15212068ed
-
SHA256
036a82bb69b5354a85df9eac8c66a44ae82294a1aea105e2e51da1a4a87cdb84
-
SHA512
25f6186f44f19bbf7dbca2df6c29753ee80281080d7e032faeae9d2d60cbcd3bf1268dd8fb4bd882bc18ee8b7ef61446a68fc290f1dbab900c4df9e869372c61
-
SSDEEP
98304:eVHYDgBzP/in0iuWhi+l4OLGIHi6h9iM:+ZzPqn0iZiuHfiM
Static task
static1
Behavioral task
behavioral1
Sample
Setup (1).msi
Resource
win7-20240705-en
Malware Config
Targets
-
-
Target
Setup (1).msi
-
Size
4.4MB
-
MD5
c4de73561e5d359aee3e8626434f95c7
-
SHA1
1020b4a315ddc4dfd4132315a98b0a15212068ed
-
SHA256
036a82bb69b5354a85df9eac8c66a44ae82294a1aea105e2e51da1a4a87cdb84
-
SHA512
25f6186f44f19bbf7dbca2df6c29753ee80281080d7e032faeae9d2d60cbcd3bf1268dd8fb4bd882bc18ee8b7ef61446a68fc290f1dbab900c4df9e869372c61
-
SSDEEP
98304:eVHYDgBzP/in0iuWhi+l4OLGIHi6h9iM:+ZzPqn0iZiuHfiM
-
Blocklisted process makes network request
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-