Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Downloadly.zip

  • Size

    15.4MB

  • Sample

    240829-kf2ltsvajk

  • MD5

    fa4f62062e0cec23b5c1d8fe67f4be2f

  • SHA1

    0735531f6e37a9807a1951d0d03b066b3949484b

  • SHA256

    a88edca3b030046fe82e7add6da06311229c5c4f9396c30c04ab3f0b433eac6e

  • SHA512

    0ffd333dc84ab8e4905fb76b3be69c7b9edba7f4eb72cc10efc82f6ae62d06c36227f4e8ada4f896e359e5ffc664d08caf76e15a40bd17e9384e73842e845995

  • SSDEEP

    393216:QyBO+LImOeHM0i9PZBc1fQWR0+cEUpvsuCos/yoD7j/kg/2bK:Tg+LImOSdaZO1fZu+crpEQs/yoDv/kef

Malware Config

Targets

    • Target

      x2s443bc.cs1.exe

    • Size

      15.9MB

    • MD5

      cf2a00cda850b570f0aa6266b9a5463e

    • SHA1

      ab9eb170448c95eccb65bf0665ac9739021200b6

    • SHA256

      c62cb66498344fc2374c0924d813711ff6fa00caea8581ae104c3c03b9233455

    • SHA512

      12d58063ccad16b01aaa5efb82a26c44c0bf58e75d497258da5cc390dcf03c2f06481b7621610305f9f350729ac4351ef432683c0f366cb3b4e24d2ffb6fc2a0

    • SSDEEP

      393216:x4qAB9wufflSR+eSHLZBsUOAyyYpqf9pzJfvht54QY3lZUEsB0:ODwuFeELZay06BJfpr4d4zB0

    • Adds Run key to start application

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks