Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

4c941ca70a...15.exe

windows7-x64

8

4c941ca70a...15.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4c941ca70a2fff6bb268a01cf0011efb1b0856abb372a030bcdaa0a916ba1c15

  • Size

    35KB

  • Sample

    220919-1wfmasefep

  • MD5

    f94a517ed28a7ffc4012caba54e76271

  • SHA1

    43865e57d84c4624b66c40c62171860e6665ab2c

  • SHA256

    4c941ca70a2fff6bb268a01cf0011efb1b0856abb372a030bcdaa0a916ba1c15

  • SHA512

    f1b563d4489b9f0101ba421a39bd378bf85b94865418afbd485ac95bdbebfc147d65a1208f9377d25d866a3e480c1d8e97ad07c5bef458e73cce5a80dd8a41b6

  • SSDEEP

    768:cflivXrVKpVhKvtxwYHwVFoeAQumucwU/C:ylqrVKprVuQuoC

Score
10/10

Malware Config

Extracted

Credentials

  • Protocol:     ftp
  • Host:
    ftp.tripod.com
  • Port:
    21
  • Username:
    onthelinux
  • Password:
    741852abc

Targets

    • Target

      4c941ca70a2fff6bb268a01cf0011efb1b0856abb372a030bcdaa0a916ba1c15

    • Size

      35KB

    • MD5

      f94a517ed28a7ffc4012caba54e76271

    • SHA1

      43865e57d84c4624b66c40c62171860e6665ab2c

    • SHA256

      4c941ca70a2fff6bb268a01cf0011efb1b0856abb372a030bcdaa0a916ba1c15

    • SHA512

      f1b563d4489b9f0101ba421a39bd378bf85b94865418afbd485ac95bdbebfc147d65a1208f9377d25d866a3e480c1d8e97ad07c5bef458e73cce5a80dd8a41b6

    • SSDEEP

      768:cflivXrVKpVhKvtxwYHwVFoeAQumucwU/C:ylqrVKprVuQuoC

    Score
    10/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks