Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
smart1.hta
-
Size
162KB
-
Sample
240819-tfexhaxank
-
MD5
e779ad7fcdc079af0012414407e2e892
-
SHA1
752c018c3be78f9fb25587d6452f2f6b0d9cd3a2
-
SHA256
aaa862c14154374b00e16f2440dabfcb9c8b7ca6655942530c83a6c96c065438
-
SHA512
ad8813afdacfc7d0b462aa011523861d393dd752af580358b81cafe408cc89ad9e0a64cbf886c61757cfb30a3cec8b3cc1ce3bdf4372d24a5d1c04a80b4f3db0
-
SSDEEP
3072:088nbom5xIAb88nbom5xIAY88nbom5xIAo88nbom5xIA:ByxH6yxHNyxHdyxH
Static task
static1
Behavioral task
behavioral1
Sample
smart1.hta
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
smart1.hta
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
smart1.hta
Resource
win10v2004-20240802-en
Malware Config
Extracted
lumma
https://femininedspzmhu.shop/api
https://writerospzm.shop/api
https://deallerospfosu.shop/api
https://bassizcellskz.shop/api
https://languagedscie.shop/api
https://complaintsipzzx.shop/api
https://quialitsuzoxm.shop/api
https://tenntysjuxmz.shop/api
Targets
-
-
Target
smart1.hta
-
Size
162KB
-
MD5
e779ad7fcdc079af0012414407e2e892
-
SHA1
752c018c3be78f9fb25587d6452f2f6b0d9cd3a2
-
SHA256
aaa862c14154374b00e16f2440dabfcb9c8b7ca6655942530c83a6c96c065438
-
SHA512
ad8813afdacfc7d0b462aa011523861d393dd752af580358b81cafe408cc89ad9e0a64cbf886c61757cfb30a3cec8b3cc1ce3bdf4372d24a5d1c04a80b4f3db0
-
SSDEEP
3072:088nbom5xIAb88nbom5xIAY88nbom5xIAo88nbom5xIA:ByxH6yxHNyxHdyxH
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-