Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    33550ea11484aef85219b652befc49c8cf1f3afc108506ee8774221c7d274eb1N.exe

  • Size

    94KB

  • Sample

    241004-l2lyyaxfrn

  • MD5

    6ce2458407f8d01cf4de84d6fd295400

  • SHA1

    bd0a3b2dbb4719483c53372c46b58d1465bbd2f9

  • SHA256

    33550ea11484aef85219b652befc49c8cf1f3afc108506ee8774221c7d274eb1

  • SHA512

    e77bcb50da2a01eec0e59ae32fbc622e3ab5b154bff800e457c24becbdf8f7ce80cddecc3cf46d7ac1ad4b2314f48bc46f7d37e311ad5f197bba70a0af0ffec4

  • SSDEEP

    1536:VNoceSeJ0xgP5BgC6Vdv90Dw4WXJrLDc0Rz/gyzRZICrWaGZh7B:vRe465BgCuVG81U0Rz4CJrWNZ7

Malware Config

Targets

    • Target

      33550ea11484aef85219b652befc49c8cf1f3afc108506ee8774221c7d274eb1N.exe

    • Size

      94KB

    • MD5

      6ce2458407f8d01cf4de84d6fd295400

    • SHA1

      bd0a3b2dbb4719483c53372c46b58d1465bbd2f9

    • SHA256

      33550ea11484aef85219b652befc49c8cf1f3afc108506ee8774221c7d274eb1

    • SHA512

      e77bcb50da2a01eec0e59ae32fbc622e3ab5b154bff800e457c24becbdf8f7ce80cddecc3cf46d7ac1ad4b2314f48bc46f7d37e311ad5f197bba70a0af0ffec4

    • SSDEEP

      1536:VNoceSeJ0xgP5BgC6Vdv90Dw4WXJrLDc0Rz/gyzRZICrWaGZh7B:vRe465BgCuVG81U0Rz4CJrWNZ7

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

MITRE ATT&CK Enterprise v15

Tasks