Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
eb26ffed624e4090018c80fdf5a633f0_JaffaCakes118
-
Size
1006KB
-
Sample
240919-mm4e4stfkc
-
MD5
eb26ffed624e4090018c80fdf5a633f0
-
SHA1
0d15a4df32232eaeaae60de08752101f8f219c30
-
SHA256
76848c6d29900ed86720672327180b6e63a3e7a9fa9e85c47d069b8ef9083e2b
-
SHA512
6e322c49153309e5f5a4ee646cd30ad2ac8dcef25f2d3db4f0d5fe9f415e612577237a4dd7ca50ed43bb6d60a512c86a0e09ee1364dae660e7eaf81fe71bac24
-
SSDEEP
24576:XOshk1owNM5S1Yhoa/nU+yYrPlM9firkxlvrJWWtXx8PmoDtSKvXKx62:esiowqE1Ra/nPdPti6Mr8r2
Static task
static1
Behavioral task
behavioral1
Sample
Kurulum.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
Kurulum.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
Kurulum.exe
-
Size
1.1MB
-
MD5
81830aef740855018f52662bac924d08
-
SHA1
6b8531858328d27aef9a9b24bfc5ffaffcab4b48
-
SHA256
1b1818c3ca030ab0f7e70c77d55eeef862df649526554e9dae234277a09eb3f1
-
SHA512
e9c66802ee22c393c4dee1332f2457eba838983d3bca16fbd8f0f54cc9b5cc5f95afb3f29ac56cdf61ca313cf1f1976a2d0b2f342d30483e6d1822569e1baa7a
-
SSDEEP
24576:/dJqC3LCwiUh/WLTMlpGcVEI776+TmS7lxD3Tvy6F+cdz4jxF0U5A:/dtLCwiURWXMT4I4SZhTv/fGxFI
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-