Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    15015a36307d35694793acaad6758aa0N.exe

  • Size

    34KB

  • Sample

    240903-rq31zaygrj

  • MD5

    15015a36307d35694793acaad6758aa0

  • SHA1

    75f9bba63b3872457a5d092c3278af86997f25ee

  • SHA256

    94dcdb01ca6f8c50935abfd0ac0c370e81434046ce742070f75132fc5a58c145

  • SHA512

    64f8af3d24f4dccadfdfde42826475bda51ec5eb22a665c01659c8b156af12b284cab02df78d534958c34a9a0cffed6c3f12750ce268f4c1c9ec2bde971b64e9

  • SSDEEP

    768:mzQYScGrIubHuYtvdxwYHw5FAe2QancwxFC30:gQTIubHy5wQaM0

Score
10/10

Malware Config

Extracted

Credentials

  • Protocol:
    ftp
  • Host:
    ftp.tripod.com
  • Port:
    21
  • Username:
    onthelinux
  • Password:
    741852abc

Targets

    • Target

      15015a36307d35694793acaad6758aa0N.exe

    • Size

      34KB

    • MD5

      15015a36307d35694793acaad6758aa0

    • SHA1

      75f9bba63b3872457a5d092c3278af86997f25ee

    • SHA256

      94dcdb01ca6f8c50935abfd0ac0c370e81434046ce742070f75132fc5a58c145

    • SHA512

      64f8af3d24f4dccadfdfde42826475bda51ec5eb22a665c01659c8b156af12b284cab02df78d534958c34a9a0cffed6c3f12750ce268f4c1c9ec2bde971b64e9

    • SSDEEP

      768:mzQYScGrIubHuYtvdxwYHw5FAe2QancwxFC30:gQTIubHy5wQaM0

    Score
    10/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks