Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3f128a6477d3d836accf898a564082a9ba4b50168bd16eac89c16ea09edd85ea
-
Size
803KB
-
Sample
250316-ab5gtaznx7
-
MD5
d9088a749f3b68662c2773eb637b0b6b
-
SHA1
907d48cbda81f3e4d9cd724154605f0657935ef8
-
SHA256
3f128a6477d3d836accf898a564082a9ba4b50168bd16eac89c16ea09edd85ea
-
SHA512
ac27136531285dc2292d1ca8604955c0460f4d481f33857e72ab77d09cb89d0929c1bd4a624cf39c94fe87353ca201af4f914edf74fe2fd1a72c22d2688e2e73
-
SSDEEP
24576:bkGvM/P1U4bBTOKr26GU5OYsnXgxvrQrAnuIw9:b2/P1UOtOKC6GrYsgxTQTIG
Behavioral task
behavioral1
Sample
3f128a6477d3d836accf898a564082a9ba4b50168bd16eac89c16ea09edd85ea.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
3f128a6477d3d836accf898a564082a9ba4b50168bd16eac89c16ea09edd85ea
-
Size
803KB
-
MD5
d9088a749f3b68662c2773eb637b0b6b
-
SHA1
907d48cbda81f3e4d9cd724154605f0657935ef8
-
SHA256
3f128a6477d3d836accf898a564082a9ba4b50168bd16eac89c16ea09edd85ea
-
SHA512
ac27136531285dc2292d1ca8604955c0460f4d481f33857e72ab77d09cb89d0929c1bd4a624cf39c94fe87353ca201af4f914edf74fe2fd1a72c22d2688e2e73
-
SSDEEP
24576:bkGvM/P1U4bBTOKr26GU5OYsnXgxvrQrAnuIw9:b2/P1UOtOKC6GrYsgxTQTIG
-
Imminent family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext
-