Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
HerGame-1.0-pc.zip
-
Size
97.0MB
-
Sample
240805-g9txasyfnr
-
MD5
9b7ca19023720af0b38014ce6357650e
-
SHA1
8de7460d39d67a83e85e22cd926f0522c2cc2388
-
SHA256
600caf0bcdd14053ae181c7e5173a73cba7074c9bac5e874a1e75307f420e78d
-
SHA512
c9cc06f1e08c0b6686a6c67c084afc26951e602b7a058eea687f758f6918a79586431a4a80613ff7bcabffb5fa9c44a2c9a87c392daa2888746587c35d60c04e
-
SSDEEP
3145728:lhJVByKZqXy9GANbwm4AipkwWCNuIT4d1NJ:lHbyKUXpA5q3juQCn
Static task
static1
Malware Config
Targets
-
-
Target
HerGame-1.0-pc.zip
-
Size
97.0MB
-
MD5
9b7ca19023720af0b38014ce6357650e
-
SHA1
8de7460d39d67a83e85e22cd926f0522c2cc2388
-
SHA256
600caf0bcdd14053ae181c7e5173a73cba7074c9bac5e874a1e75307f420e78d
-
SHA512
c9cc06f1e08c0b6686a6c67c084afc26951e602b7a058eea687f758f6918a79586431a4a80613ff7bcabffb5fa9c44a2c9a87c392daa2888746587c35d60c04e
-
SSDEEP
3145728:lhJVByKZqXy9GANbwm4AipkwWCNuIT4d1NJ:lHbyKUXpA5q3juQCn
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1