Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    SpotifySetup.exe

  • Size

    1010KB

  • Sample

    241004-hlecdatfra

  • MD5

    cf2cd227b0150e7d2c7ddff000d7c685

  • SHA1

    fc48ca37ec104634bc559a96d91c1cac2bbbd0f0

  • SHA256

    1476b04fa0f31e75a35d04326763b8aa4049a8443038839a50e714c66b2216a1

  • SHA512

    5b2a030822c2ead4a153efed99b265610909cf29f362e09df0cc5e1a3992edde7ee4b1c795714a1598adae7ca8d151c5744e6499cedcfcff2a973697a5f4a8ee

  • SSDEEP

    12288:FBfCfUkWIsxQ3pqtn9ysfX77JdEa9ZrgFldOxfbOf/:PCfUllxSYysP77JdEa9EM6n

Malware Config

Targets

    • Target

      SpotifySetup.exe

    • Size

      1010KB

    • MD5

      cf2cd227b0150e7d2c7ddff000d7c685

    • SHA1

      fc48ca37ec104634bc559a96d91c1cac2bbbd0f0

    • SHA256

      1476b04fa0f31e75a35d04326763b8aa4049a8443038839a50e714c66b2216a1

    • SHA512

      5b2a030822c2ead4a153efed99b265610909cf29f362e09df0cc5e1a3992edde7ee4b1c795714a1598adae7ca8d151c5744e6499cedcfcff2a973697a5f4a8ee

    • SSDEEP

      12288:FBfCfUkWIsxQ3pqtn9ysfX77JdEa9ZrgFldOxfbOf/:PCfUllxSYysP77JdEa9EM6n

    • Adds Run key to start application

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks