Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NewRelicAgent_x64_8.24.244.0.msi

  • Size

    4.9MB

  • Sample

    240925-l2qxwssdmd

  • MD5

    0427777291730ea30290cca53df5dedb

  • SHA1

    70e1cc66843a5c8a9631b20555d3cf2b5b9a9630

  • SHA256

    ead0577e228789bfd4f57dd1a277c1393d150f05977340fffdc682e300603453

  • SHA512

    9705055b3ab155e50b86c168e6c328fd0858446e26beb5d3a57098734768faaf36b253ad47e78cf72003e1ef63a6a0185828bfe7af93d99966e4771d7aa4901b

  • SSDEEP

    98304:f711NIX5Cu4OTwN0yqhcIzin+d8ZNQr0x61qPd6:f71fYT4hyWeDdlrMd

Malware Config

Targets

    • Target

      NewRelicAgent_x64_8.24.244.0.msi

    • Size

      4.9MB

    • MD5

      0427777291730ea30290cca53df5dedb

    • SHA1

      70e1cc66843a5c8a9631b20555d3cf2b5b9a9630

    • SHA256

      ead0577e228789bfd4f57dd1a277c1393d150f05977340fffdc682e300603453

    • SHA512

      9705055b3ab155e50b86c168e6c328fd0858446e26beb5d3a57098734768faaf36b253ad47e78cf72003e1ef63a6a0185828bfe7af93d99966e4771d7aa4901b

    • SSDEEP

      98304:f711NIX5Cu4OTwN0yqhcIzin+d8ZNQr0x61qPd6:f71fYT4hyWeDdlrMd

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks