Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Redragon K630RGB.exe

  • Size

    5.4MB

  • Sample

    231028-z9nz6afc54

  • MD5

    f43d545ff7b4f38313212f30114d7c62

  • SHA1

    84848dd6b0735eb19f27002f700b7d4d811b5501

  • SHA256

    246f1dbfde08b40348ddf8c4d5b12bc5f8bd1391366809b188e85e086dcff02c

  • SHA512

    ae051b47070c074be7860122fec08a5e21d2af8be7cadf8f8fafd177b5b93cb6dba7a85e83a60b06d77e9935a7e9712ec1845260e37902c939ce7b3abc71e5b5

  • SSDEEP

    98304:Mj8w1b2sn6foZ2RdsX3eyhwMbe83txarJXj7PbbMNhNk1kc1N:MQs6wZ2R7r83bEJboNhWkc1N

Malware Config

Targets

    • Target

      Redragon K630RGB.exe

    • Size

      5.4MB

    • MD5

      f43d545ff7b4f38313212f30114d7c62

    • SHA1

      84848dd6b0735eb19f27002f700b7d4d811b5501

    • SHA256

      246f1dbfde08b40348ddf8c4d5b12bc5f8bd1391366809b188e85e086dcff02c

    • SHA512

      ae051b47070c074be7860122fec08a5e21d2af8be7cadf8f8fafd177b5b93cb6dba7a85e83a60b06d77e9935a7e9712ec1845260e37902c939ce7b3abc71e5b5

    • SSDEEP

      98304:Mj8w1b2sn6foZ2RdsX3eyhwMbe83txarJXj7PbbMNhNk1kc1N:MQs6wZ2R7r83bEJboNhWkc1N

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks