Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    lghub_installer.exe

  • Size

    39.6MB

  • Sample

    230207-thjy8sfg2w

  • MD5

    e11bc00bbe8a70a3cb7786d16434d9ca

  • SHA1

    89bf143bfe0af7cb1372b8e5e24524d2df8ed13f

  • SHA256

    234be8544a1cacdaadccd0718d14be477c861e38a1a8cf06ea5669ea5a472fb7

  • SHA512

    b73e33bdfc9d4c8c35ca1ee0947fdebb707c98c79fd731e23529a601aeeffa61e972b5a0bc12d3c8efcbc64b59382238dd8c62ca12cef07716f85c924dc951d5

  • SSDEEP

    786432:U05sfbEpttD7yBG/4M3OW+upttD7yBG/PcXU9g5D:U0cEpttD7y0/pnpttD7y0/0XUm5D

Malware Config

Targets

    • Target

      lghub_installer.exe

    • Size

      39.6MB

    • MD5

      e11bc00bbe8a70a3cb7786d16434d9ca

    • SHA1

      89bf143bfe0af7cb1372b8e5e24524d2df8ed13f

    • SHA256

      234be8544a1cacdaadccd0718d14be477c861e38a1a8cf06ea5669ea5a472fb7

    • SHA512

      b73e33bdfc9d4c8c35ca1ee0947fdebb707c98c79fd731e23529a601aeeffa61e972b5a0bc12d3c8efcbc64b59382238dd8c62ca12cef07716f85c924dc951d5

    • SSDEEP

      786432:U05sfbEpttD7yBG/4M3OW+upttD7yBG/PcXU9g5D:U0cEpttD7y0/pnpttD7y0/0XUm5D

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks