Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e8fd17e6d28f1406f23069fc57dcbccc_JC.exe

  • Size

    289KB

  • Sample

    230923-ryadmaac43

  • MD5

    e8fd17e6d28f1406f23069fc57dcbccc

  • SHA1

    84ed8ef932642a7ac4e14c5aaf574fcefb5fdde1

  • SHA256

    66676967121a4a6c888272333421b82973cb9b8c58d85b56aaa64be3ab2149bc

  • SHA512

    f245c1b7b65b9784ea24aa4c911082821a3acbf8b99ea90117b5b1d8355264e17e619b2017da8ce3c269a6e50bb40bd4c4b84bd7a74b92b84c8d361303447691

  • SSDEEP

    6144:U5wLulwRBdtGFGo6YpO9sxkECzJLaQVbU5:zua7dtGFGn7GxklJLJbU5

Score
7/10

Malware Config

Targets

    • Target

      e8fd17e6d28f1406f23069fc57dcbccc_JC.exe

    • Size

      289KB

    • MD5

      e8fd17e6d28f1406f23069fc57dcbccc

    • SHA1

      84ed8ef932642a7ac4e14c5aaf574fcefb5fdde1

    • SHA256

      66676967121a4a6c888272333421b82973cb9b8c58d85b56aaa64be3ab2149bc

    • SHA512

      f245c1b7b65b9784ea24aa4c911082821a3acbf8b99ea90117b5b1d8355264e17e619b2017da8ce3c269a6e50bb40bd4c4b84bd7a74b92b84c8d361303447691

    • SSDEEP

      6144:U5wLulwRBdtGFGo6YpO9sxkECzJLaQVbU5:zua7dtGFGn7GxklJLJbU5

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks