Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
964d0cf040d3627b1fb810ae4c9c4a40N.exe
-
Size
3.0MB
-
Sample
240820-g9e35sxelf
-
MD5
964d0cf040d3627b1fb810ae4c9c4a40
-
SHA1
f2d1211d17a38550d9278f281f6d39b37ff8a682
-
SHA256
40e15b4fa176fe80b124a013d2f6f30769266adebccb0c0ff4965d2eba3d25c3
-
SHA512
d889d8e94a9e3aafbdc6f6cbba54ee64eb744b3d40f4adbc690a6f5abdb750c7840e0e0c73111e000484b5ee8bb917ab7e4cca4b2a46e7804d00725797bdafa7
-
SSDEEP
49152:qiH2AaajKHX/Ft0vR+Y1pxsVnmMAnBxbu2ONWWIL2wM8+AtZiti8:HHRawKHPFyvR+2VMETbu2vrSwM8zg
Static task
static1
Behavioral task
behavioral1
Sample
964d0cf040d3627b1fb810ae4c9c4a40N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
964d0cf040d3627b1fb810ae4c9c4a40N.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
964d0cf040d3627b1fb810ae4c9c4a40N.exe
-
Size
3.0MB
-
MD5
964d0cf040d3627b1fb810ae4c9c4a40
-
SHA1
f2d1211d17a38550d9278f281f6d39b37ff8a682
-
SHA256
40e15b4fa176fe80b124a013d2f6f30769266adebccb0c0ff4965d2eba3d25c3
-
SHA512
d889d8e94a9e3aafbdc6f6cbba54ee64eb744b3d40f4adbc690a6f5abdb750c7840e0e0c73111e000484b5ee8bb917ab7e4cca4b2a46e7804d00725797bdafa7
-
SSDEEP
49152:qiH2AaajKHX/Ft0vR+Y1pxsVnmMAnBxbu2ONWWIL2wM8+AtZiti8:HHRawKHPFyvR+2VMETbu2vrSwM8zg
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-