Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8d1dc96d8cfd8cff1c77455385109700N.exe

  • Size

    110KB

  • Sample

    240821-z5xrhavdnq

  • MD5

    8d1dc96d8cfd8cff1c77455385109700

  • SHA1

    143278d86536b009931e85949bec941e6b0ff227

  • SHA256

    8d80ea96d391c3e8b4a805c2c1f763aae182f6f3c68b72c1e1bd485265b4a136

  • SHA512

    0aed2ec4f8c7d6e2966d9aaa432ad1f3ce2b90bd4405171261253b519dc9c19f164fb2f1e200987bcdbb71e33e87d65c7821108e530d187603f3419ab074cf9a

  • SSDEEP

    3072:kMKau0t1+JXl6MGnDu60HOZqQwVyt0d+5Ov1c:kMyk6XIMGnDu/QEytwaOvW

Malware Config

Targets

    • Target

      8d1dc96d8cfd8cff1c77455385109700N.exe

    • Size

      110KB

    • MD5

      8d1dc96d8cfd8cff1c77455385109700

    • SHA1

      143278d86536b009931e85949bec941e6b0ff227

    • SHA256

      8d80ea96d391c3e8b4a805c2c1f763aae182f6f3c68b72c1e1bd485265b4a136

    • SHA512

      0aed2ec4f8c7d6e2966d9aaa432ad1f3ce2b90bd4405171261253b519dc9c19f164fb2f1e200987bcdbb71e33e87d65c7821108e530d187603f3419ab074cf9a

    • SSDEEP

      3072:kMKau0t1+JXl6MGnDu60HOZqQwVyt0d+5Ov1c:kMyk6XIMGnDu/QEytwaOvW

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks