Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Maxon_App_2024.1.1_Win.exe

  • Size

    42.8MB

  • Sample

    240228-1sv8kseh49

  • MD5

    9d6bff2664275db5a5563904126024f8

  • SHA1

    a04fd43cf5da016f2a2d3a91015f677db5bf353a

  • SHA256

    405afe98393ff3e1bbf9ee11bca78a6260d964d313c77bc088ee658e20f5e06c

  • SHA512

    98b8c56f6813e5c524c0d21d2d2ab42d39e608ddcb1e65b54ff684bb506dbd937753cb8200cce2581ee5dd1e36a559924175a40b641e56fa0479c868d395c5c1

  • SSDEEP

    786432:+P85CCP/tTWaoKptj3ZkJqtLjmX01qKzqZdqHTgxXU2fHUb4VECJ:VLPVTWaoKptj3ZkctLE8sigxTvEC

Malware Config

Targets

    • Target

      Maxon_App_2024.1.1_Win.exe

    • Size

      42.8MB

    • MD5

      9d6bff2664275db5a5563904126024f8

    • SHA1

      a04fd43cf5da016f2a2d3a91015f677db5bf353a

    • SHA256

      405afe98393ff3e1bbf9ee11bca78a6260d964d313c77bc088ee658e20f5e06c

    • SHA512

      98b8c56f6813e5c524c0d21d2d2ab42d39e608ddcb1e65b54ff684bb506dbd937753cb8200cce2581ee5dd1e36a559924175a40b641e56fa0479c868d395c5c1

    • SSDEEP

      786432:+P85CCP/tTWaoKptj3ZkJqtLjmX01qKzqZdqHTgxXU2fHUb4VECJ:VLPVTWaoKptj3ZkctLE8sigxTvEC

    • Modifies file permissions

    • Adds Run key to start application

    • Checks whether UAC is enabled

    • Downloads MZ/PE file

    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks