Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
v0.81_FlashBrowser_x64.exe
-
Size
67.9MB
-
Sample
240805-1eennsygmm
-
MD5
d044590bbe4a84781f4665bc5aaf883c
-
SHA1
eab1a5f0969c4766b54b436aec1057981e93b142
-
SHA256
ce573c0b8c54161b468056ab6c62214edea12b05c1c25e1bbb6e54ace8a703ec
-
SHA512
746d036e662a7f6c5a2450ba1b4415b610f9bf27b1264051a5208bd8651e109e6a020d28323b1d73e6dfcf706806d5553886b45b8ceee6009648012f8880cc9d
-
SSDEEP
1572864:zvVaMDheNapAdTpSE5qklfDPx8C/XJmYui2CYIfAY2Avs4m:BzZE5zl7J8aXAYN2C3AY2MsF
Static task
static1
Behavioral task
behavioral1
Sample
v0.81_FlashBrowser_x64.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
v0.81_FlashBrowser_x64.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
v0.81_FlashBrowser_x64.exe
-
Size
67.9MB
-
MD5
d044590bbe4a84781f4665bc5aaf883c
-
SHA1
eab1a5f0969c4766b54b436aec1057981e93b142
-
SHA256
ce573c0b8c54161b468056ab6c62214edea12b05c1c25e1bbb6e54ace8a703ec
-
SHA512
746d036e662a7f6c5a2450ba1b4415b610f9bf27b1264051a5208bd8651e109e6a020d28323b1d73e6dfcf706806d5553886b45b8ceee6009648012f8880cc9d
-
SSDEEP
1572864:zvVaMDheNapAdTpSE5qklfDPx8C/XJmYui2CYIfAY2Avs4m:BzZE5zl7J8aXAYN2C3AY2MsF
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Legitimate hosting services abused for malware hosting/C2
-