Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

a2dc9f7475...6d.exe

windows7-x64

8

a2dc9f7475...6d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a2dc9f74753fad200263a7631587ecea8236462f0b6beb2c977119b610070d6d

  • Size

    34KB

  • Sample

    221029-1gjqeagbg9

  • MD5

    8468e0ec4fb748cc7671d6b1491efa80

  • SHA1

    40e52678fb38a54687cac2721ee5242632ace8b6

  • SHA256

    a2dc9f74753fad200263a7631587ecea8236462f0b6beb2c977119b610070d6d

  • SHA512

    e06c589edc2b4029385c81f278e917c927b39df815842000a212f01a381b7b8a2349dd433312e9ad6bb07d6f4dc819bf4e420112cf9ad55954e57372a8f4b8f7

  • SSDEEP

    768:AzQYScGrIubHuYtvdxwYHw5FAe2QKncwxJ/:aQTIubHy5wQKF

Score
10/10

Malware Config

Extracted

Credentials

  • Protocol:     ftp
  • Host:
    ftp.tripod.com
  • Port:
    21
  • Username:
    onthelinux
  • Password:
    741852abc

Targets

    • Target

      a2dc9f74753fad200263a7631587ecea8236462f0b6beb2c977119b610070d6d

    • Size

      34KB

    • MD5

      8468e0ec4fb748cc7671d6b1491efa80

    • SHA1

      40e52678fb38a54687cac2721ee5242632ace8b6

    • SHA256

      a2dc9f74753fad200263a7631587ecea8236462f0b6beb2c977119b610070d6d

    • SHA512

      e06c589edc2b4029385c81f278e917c927b39df815842000a212f01a381b7b8a2349dd433312e9ad6bb07d6f4dc819bf4e420112cf9ad55954e57372a8f4b8f7

    • SSDEEP

      768:AzQYScGrIubHuYtvdxwYHw5FAe2QKncwxJ/:aQTIubHy5wQKF

    Score
    10/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks