Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    301c2fdca88d13d951ba244bc0e89c70N.exe

  • Size

    59KB

  • Sample

    240724-bltczasgjd

  • MD5

    301c2fdca88d13d951ba244bc0e89c70

  • SHA1

    8d690dcc6f2c96143266b3b849f01fbd66a52fce

  • SHA256

    113cdcd7a6eb07520cb9866f2272625f2cb383e0d8b422b67cb1ac88c63047df

  • SHA512

    c21b68c9b8f96fe383c0bc9b106bc6bc59e7e179ef3b48e487a62587f5d9960cc114985895864494edadd9aadfa3ee7b90e5905606fc5bf071c3a608011a28f8

  • SSDEEP

    768:9qSqC8+N5ozQQHncwxWmNXMX3cX8wtgtzpAXpX8/X/7CUrfbtSqklD0:9rqfzQQHamN8835mv7CUroqku

Score
10/10

Malware Config

Extracted

Credentials

  • Protocol:
    ftp
  • Host:
    ftp.tripod.com
  • Port:
    21
  • Username:
    onthelinux
  • Password:
    741852abc

Targets

    • Target

      301c2fdca88d13d951ba244bc0e89c70N.exe

    • Size

      59KB

    • MD5

      301c2fdca88d13d951ba244bc0e89c70

    • SHA1

      8d690dcc6f2c96143266b3b849f01fbd66a52fce

    • SHA256

      113cdcd7a6eb07520cb9866f2272625f2cb383e0d8b422b67cb1ac88c63047df

    • SHA512

      c21b68c9b8f96fe383c0bc9b106bc6bc59e7e179ef3b48e487a62587f5d9960cc114985895864494edadd9aadfa3ee7b90e5905606fc5bf071c3a608011a28f8

    • SSDEEP

      768:9qSqC8+N5ozQQHncwxWmNXMX3cX8wtgtzpAXpX8/X/7CUrfbtSqklD0:9rqfzQQHamN8835mv7CUroqku

    Score
    10/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks