Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

0f21d1be27...92.msi

windows7-x64

8

0f21d1be27...92.msi

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f21d1be273c71a066d1a66189bf0082394de92c830cfaa7bbbe4370e1cb9592

  • Size

    107.1MB

  • Sample

    220929-ps182sage9

  • MD5

    608b4ff0db79baf5ca8bbaf57ec7af31

  • SHA1

    c0c35f1d18172a5cbebb92387fd505f6509a095a

  • SHA256

    0f21d1be273c71a066d1a66189bf0082394de92c830cfaa7bbbe4370e1cb9592

  • SHA512

    49b6013ed5697ff95f3dbd43d55822cbe77ae633ffc0579d92a351103ee41b8f04883bb226391ea7357637b5cd4464d40f320265184d13327bc965f12ad8c549

  • SSDEEP

    3145728:6FEp1cAjJNOCsXvY27nm0LT419R/pt8OBp4e0/QN:n7FfknLdTC9R/piq0

Score
8/10

Malware Config

Targets

    • Target

      0f21d1be273c71a066d1a66189bf0082394de92c830cfaa7bbbe4370e1cb9592

    • Size

      107.1MB

    • MD5

      608b4ff0db79baf5ca8bbaf57ec7af31

    • SHA1

      c0c35f1d18172a5cbebb92387fd505f6509a095a

    • SHA256

      0f21d1be273c71a066d1a66189bf0082394de92c830cfaa7bbbe4370e1cb9592

    • SHA512

      49b6013ed5697ff95f3dbd43d55822cbe77ae633ffc0579d92a351103ee41b8f04883bb226391ea7357637b5cd4464d40f320265184d13327bc965f12ad8c549

    • SSDEEP

      3145728:6FEp1cAjJNOCsXvY27nm0LT419R/pt8OBp4e0/QN:n7FfknLdTC9R/piq0

    Score
    8/10

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks