Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
AkrienBetaLoader.exe
-
Size
14.9MB
-
Sample
240930-pqel9szbrf
-
MD5
68a83efe554d24837a9f652f57d0d989
-
SHA1
ec4cc4c812e817fed751565707c08e7f9cbb6b39
-
SHA256
3839137c0450ca36256d511bc12c2a94fe35156908967784353a2839cd7182d3
-
SHA512
a785fdd177aebb55516435c892630a7e1ec832f2d37f4b1b0af457f4c697498620ba52d4837601fcd5cd90da67ab4d08cc319a7979c31a782b40a65a60571f34
-
SSDEEP
196608:NjmOIB5vCgkg9s2xW5NjVAhP+Zdruaz+hzxWquxBJ7jmmEHSWwP2LDYJ1o3cz3mG:N5IB5vCgkLKgVA+Run2zJ7ZCO3m9t
Behavioral task
behavioral1
Sample
AkrienBetaLoader.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
AkrienBetaLoader.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
AkrienBetaLoader.exe
-
Size
14.9MB
-
MD5
68a83efe554d24837a9f652f57d0d989
-
SHA1
ec4cc4c812e817fed751565707c08e7f9cbb6b39
-
SHA256
3839137c0450ca36256d511bc12c2a94fe35156908967784353a2839cd7182d3
-
SHA512
a785fdd177aebb55516435c892630a7e1ec832f2d37f4b1b0af457f4c697498620ba52d4837601fcd5cd90da67ab4d08cc319a7979c31a782b40a65a60571f34
-
SSDEEP
196608:NjmOIB5vCgkg9s2xW5NjVAhP+Zdruaz+hzxWquxBJ7jmmEHSWwP2LDYJ1o3cz3mG:N5IB5vCgkLKgVA+Run2zJ7ZCO3m9t
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-