Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d230ef90b153f8c9f6cb1085fa134a44922f78f1a4e95eeb7c73d3651adaa52b
-
Size
455KB
-
Sample
250111-hm5kyssldm
-
MD5
8144f89f4a1111ef565101610e224adb
-
SHA1
91e78ca34e5d6c3d7d780b88f26c88491f53826e
-
SHA256
d230ef90b153f8c9f6cb1085fa134a44922f78f1a4e95eeb7c73d3651adaa52b
-
SHA512
d57070c2099c514b2a207f5b367e05fec0083dce726d5067ce304bf0a79754e0b93781fbad8a311c10afb368c40933bd505a177620a34585dde34f5cc29496fe
-
SSDEEP
6144:aBapC9DUIYmO5Kv5Q7X/l/rYvkW1VxxfnzrV9UAH0ctkPfc92F88LpIh9jil:VpQD+mO5KWy/zrVbt4fcYv9U9jI
Malware Config
Targets
-
-
Target
d230ef90b153f8c9f6cb1085fa134a44922f78f1a4e95eeb7c73d3651adaa52b
-
Size
455KB
-
MD5
8144f89f4a1111ef565101610e224adb
-
SHA1
91e78ca34e5d6c3d7d780b88f26c88491f53826e
-
SHA256
d230ef90b153f8c9f6cb1085fa134a44922f78f1a4e95eeb7c73d3651adaa52b
-
SHA512
d57070c2099c514b2a207f5b367e05fec0083dce726d5067ce304bf0a79754e0b93781fbad8a311c10afb368c40933bd505a177620a34585dde34f5cc29496fe
-
SSDEEP
6144:aBapC9DUIYmO5Kv5Q7X/l/rYvkW1VxxfnzrV9UAH0ctkPfc92F88LpIh9jil:VpQD+mO5KWy/zrVbt4fcYv9U9jI
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-