Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ac3e22af9883904be5064ba0ca4dfd2d_JaffaCakes118
-
Size
72KB
-
Sample
240819-x1ap3a1eqg
-
MD5
ac3e22af9883904be5064ba0ca4dfd2d
-
SHA1
79122b05eeda8d913a013f648ce3d5ce3c0fbc2c
-
SHA256
5e1a5015faf7d12c0b6b3faf02e74ae3beaceb361956c98e4e461444d153a848
-
SHA512
9355e05bd0c99145e32b953699d75561dabc07590a015487b681de6426ca83a373b428d75ec77d9d02eaa6c6a24f0dde4321ec5207d62b7681559ab4eb1d94fc
-
SSDEEP
1536:/QjaW50oZqnB/UuPggZe94quIDIhZPyNCgh5R+xiXxrgxe:/Q/0oZgBdPM9BlIhI/RnxrB
Static task
static1
Behavioral task
behavioral1
Sample
155绿色软件站.url
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
155绿色软件站.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
右键显示隐藏系统文件.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
右键显示隐藏系统文件.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
155绿色软件站.url
-
Size
219B
-
MD5
3a1f2a8a3ef08ae269517a69ea918b2c
-
SHA1
7d2e6719702bc8472e045e010efa6ed3f7df4b5b
-
SHA256
66eafefa8bb0155e60828476bde6068573fe64a4fd0aa052eba074dbe85d46cd
-
SHA512
22203a78192cadc02d0f887247675925273a69e3be82ec1a331197f892216a282cc8f37c3ffbfb578a708244181037277b8cc6a40d8ec70cdf0feac5d80f8576
Score1/10 -
-
-
Target
右键显示隐藏系统文件.exe
-
Size
414KB
-
MD5
6d41ee8c4bd2b574b02a29ce0b023eb9
-
SHA1
6357ac007742c6b8fc6c10eb303bf729af663ce9
-
SHA256
9f6bb66ec52ebb6d52006955dc94399c51d192dbec076df269de0552593b12ce
-
SHA512
e0732b54b4b4edcf35f1d99df9a7dddb9d6d1a91545be6657f55318e98f80ab5dbf7b0701b62c327be14e52bbe5b69b8117946deecbdd204ad3cb0fed5af3525
-
SSDEEP
6144:aTfFDbRnOTrZc1JWGkTfFDbRnOTrZc1JFo7TfFDbRnOTrZc1JlBE:I5OG2GW5OGlo95OGFBE
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-