Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
loader.exe
-
Size
88.1MB
-
Sample
250327-tm3l5swrx5
-
MD5
bbb1f95f197ea8998a5a536c9ac501b1
-
SHA1
aabc56c91dd93bad432dec313f9bd5f550e1c7b2
-
SHA256
dc14f97449b5247af83e957ecaa70d90c86683e257541d09513a18bc89c519ff
-
SHA512
a824447c572f5e481c35fac7ca34c9b91eab73762951ebbf7c46ac2845374143175601796b1c8127d166ea7ad2861201a6add343f9b949e7f3095a8884c1afb8
-
SSDEEP
1572864:GtIupudNK/lgWj9P0OkiqOv8im2AzvE7lbli0GiYgj+h58sMwcVMowLW:VYoWi+MOknOv8i3mEw0Y5Qyow
Behavioral task
behavioral1
Sample
loader.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
loader.exe
Resource
win10v2004-20250314-en
Malware Config
Targets
-
-
Target
loader.exe
-
Size
88.1MB
-
MD5
bbb1f95f197ea8998a5a536c9ac501b1
-
SHA1
aabc56c91dd93bad432dec313f9bd5f550e1c7b2
-
SHA256
dc14f97449b5247af83e957ecaa70d90c86683e257541d09513a18bc89c519ff
-
SHA512
a824447c572f5e481c35fac7ca34c9b91eab73762951ebbf7c46ac2845374143175601796b1c8127d166ea7ad2861201a6add343f9b949e7f3095a8884c1afb8
-
SSDEEP
1572864:GtIupudNK/lgWj9P0OkiqOv8im2AzvE7lbli0GiYgj+h58sMwcVMowLW:VYoWi+MOknOv8i3mEw0Y5Qyow
Score9/10-
Enumerates VirtualBox DLL files
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-