Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    CTFarmSetup-Dl0r1S07Eu.exe

  • Size

    5.7MB

  • Sample

    240306-zzwx1sad8t

  • MD5

    fbe57e7ad749b7446da15a3009c1dbda

  • SHA1

    5fe1d65462acd362681c611ce0f832c0a74a6e70

  • SHA256

    af2157afdb3d8390e7a8649e64a3108753f90f1c59837f8bd9895780c1e95d12

  • SHA512

    555f40f23aa5151d5a2ef3c0edf0d57f5e56fe50b0cc0884f0fb900044223e649252061394de53a60e1db0267abf98929931d4ad8c4243ae10e40fc118ba6bc3

  • SSDEEP

    98304:IsaZ+xj0ghxlL8nVU18k0xlVxCtq5xv00dre4+7PDsIEU+B9KpNGwPUlUQb0+YUE:Ir+xj0ghxlwWGVxCE5vr+7ZEUU9aNGp4

Malware Config

Targets

    • Target

      CTFarmSetup-Dl0r1S07Eu.exe

    • Size

      5.7MB

    • MD5

      fbe57e7ad749b7446da15a3009c1dbda

    • SHA1

      5fe1d65462acd362681c611ce0f832c0a74a6e70

    • SHA256

      af2157afdb3d8390e7a8649e64a3108753f90f1c59837f8bd9895780c1e95d12

    • SHA512

      555f40f23aa5151d5a2ef3c0edf0d57f5e56fe50b0cc0884f0fb900044223e649252061394de53a60e1db0267abf98929931d4ad8c4243ae10e40fc118ba6bc3

    • SSDEEP

      98304:IsaZ+xj0ghxlL8nVU18k0xlVxCtq5xv00dre4+7PDsIEU+B9KpNGwPUlUQb0+YUE:Ir+xj0ghxlwWGVxCE5vr+7ZEUU9aNGp4

    • Adds Run key to start application

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks