Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

c5c4ec085b...0f.exe

windows7-x64

10

c5c4ec085b...0f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5c4ec085b2a6de07886170556cbb8df20d699716e520b46fdfad09cf697790f

  • Size

    211KB

  • Sample

    240406-c56yvahh92

  • MD5

    1781926557e5016f61aa3ea9f0b20338

  • SHA1

    4a028c0f0dd10a9f422f6cfbdf45d77afdf9dc4d

  • SHA256

    c5c4ec085b2a6de07886170556cbb8df20d699716e520b46fdfad09cf697790f

  • SHA512

    a1fe7a67fc0e9e745549c777576de49fa2e54b59ea3a3e5a57ac78e810f161fa81130b0d6a61bdaa4e827efee624df39c332cd7e3b49fafbd01b58aa153957da

  • SSDEEP

    3072:nVHgCc4xGvbwcU9KQ2BBAHmaPxiVoSb5EdU:OCc4xGxWKQ2BonxfU

Score
10/10

Malware Config

Extracted

Credentials

  • Protocol:     ftp
  • Host:
    ftp.tripod.com
  • Port:
    21
  • Username:
    onthelinux
  • Password:
    741852abc

Targets

    • Target

      c5c4ec085b2a6de07886170556cbb8df20d699716e520b46fdfad09cf697790f

    • Size

      211KB

    • MD5

      1781926557e5016f61aa3ea9f0b20338

    • SHA1

      4a028c0f0dd10a9f422f6cfbdf45d77afdf9dc4d

    • SHA256

      c5c4ec085b2a6de07886170556cbb8df20d699716e520b46fdfad09cf697790f

    • SHA512

      a1fe7a67fc0e9e745549c777576de49fa2e54b59ea3a3e5a57ac78e810f161fa81130b0d6a61bdaa4e827efee624df39c332cd7e3b49fafbd01b58aa153957da

    • SSDEEP

      3072:nVHgCc4xGvbwcU9KQ2BBAHmaPxiVoSb5EdU:OCc4xGxWKQ2BonxfU

    Score
    10/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks