Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

06/08/2024, 01:04

240806-be2e1ayaqe 6

06/08/2024, 00:50

240806-a7a8vaxgkd 8

06/08/2024, 00:48

240806-a5tbmstfnk 6

06/08/2024, 00:42

240806-a2lgmatenn 6

General

  • Target

    SpotifySetup.exe

  • Size

    909KB

  • Sample

    240806-a5tbmstfnk

  • MD5

    6d2f652dfe8001c0caf6aa246a418124

  • SHA1

    d1d5f533b5b514d7d863541974367e3ed86f8bfc

  • SHA256

    f56a1f2ddcc44699d397d3700482cbca85ad8104603fd8e0133f79fca5efd3bf

  • SHA512

    9a8faae6e532702ab0b79863ff1bf490ef8a3e8d5052c2082a2d1426cef171de22ebb895ffb6b6b2173940bbfa89b4c4702966318acc6c5d5e53cd72aa67b39f

  • SSDEEP

    12288:O8PTZuEHn+AgZZpi7xTICP4AC0laDi6u5DUCuUhO:O8PTwEwZpi7xT3/lauB5DUys

Malware Config

Targets

    • Target

      SpotifySetup.exe

    • Size

      909KB

    • MD5

      6d2f652dfe8001c0caf6aa246a418124

    • SHA1

      d1d5f533b5b514d7d863541974367e3ed86f8bfc

    • SHA256

      f56a1f2ddcc44699d397d3700482cbca85ad8104603fd8e0133f79fca5efd3bf

    • SHA512

      9a8faae6e532702ab0b79863ff1bf490ef8a3e8d5052c2082a2d1426cef171de22ebb895ffb6b6b2173940bbfa89b4c4702966318acc6c5d5e53cd72aa67b39f

    • SSDEEP

      12288:O8PTZuEHn+AgZZpi7xTICP4AC0laDi6u5DUCuUhO:O8PTwEwZpi7xT3/lauB5DUys

    • Adds Run key to start application

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks