Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Vegas Pro 19.7z

  • Size

    866.8MB

  • Sample

    230101-k45ndsee9y

  • MD5

    623ed9fed6a3e21da124bf282933b002

  • SHA1

    e7489161101624b2352edc89bc4d43ac7a9e53ea

  • SHA256

    d5866fd43e413fb9002d9f44257292ba6ef459c664d5364d6040b5d195b1ee4e

  • SHA512

    a6fdc814b8d1852cc40853a5db557fd866fc476b258e1e545fea2a23e634fa6b6dd3c3d815b291fbe206752864842b3db6842bbb67e3ff2957bee11993b65473

  • SSDEEP

    25165824:tqKbKQXF4fRvmbxjIOZelE8lF5ElcUtEuuOpsmL:AKbKQXF4JObxjImelVX5EWpuuOpsi

Score
8/10

Malware Config

Targets

    • Target

      Vegas Pro 19/PATCH/protein/Protein_x64.5.0.dll

    • Size

      60KB

    • MD5

      9c4d4aeed720e4981dd263d570da7e8e

    • SHA1

      287151e3018ea44cf1712422c8e3be2b352632f2

    • SHA256

      80243fe0f5ebe22e8fb7770c0cda6e48b9cd7978adf9140bd6bc7f3f9091760c

    • SHA512

      dad1ca7f2740904ffc9fdb582dbcdfcdc18f23eb4f045e99875fb32bc6d4e02fc67da5562b3ee2bd0361820bd2de020b039877bc521a42d42b3091e19ba71202

    • SSDEEP

      1536:qU68qk9n9cFcVVcfokr59HldDCAfEhAxjj:qJfkwFcbMDzxX

    Score
    3/10
    • Target

      Vegas Pro 19/PATCH/vegas190.exe

    • Size

      35.0MB

    • MD5

      9e648fe63e997507c1fe1ffacc129410

    • SHA1

      01f6c6e7d743c3d1ad3b5eb3f5caa2dd3b2c7eae

    • SHA256

      8450d00973056354113cb777c43ff249cb0675c3ee2eec4905f1b06cb55f50ce

    • SHA512

      e4223e7d9da14432610a49e08e625e3b317f63dd3402abbe22fc303b8389c4ea9b5958c085aa3ef42591a02e96349e1bf1d1cad76ee8edbe375e8fb063793240

    • SSDEEP

      786432:OXSLV172YsqfVC/BTpqX5w9l0YqBvPWXsG1C:OA/6YsFB85w9qBvOho

    Score
    1/10
    • Target

      Vegas Pro 19/VEGAS_Pro_19.0.0.341.exe

    • Size

      864.5MB

    • MD5

      71633df0330f63b93f2325281024da55

    • SHA1

      b887377e96399a28e845e46fda04419f52857a3e

    • SHA256

      54cf2ddd57cc5d7a6936471f5ae3a6fb6d67e079245e0d007db70c1c13514890

    • SHA512

      dc4cad00537a9ce0c04b885fcebc8ce1235a5bd4a558a178a292857de94af5b0315c30885ec60ca331f5c20c1da2b799783f2049de280e232fac454b413ee93b

    • SSDEEP

      25165824:EcVc7FTsoHGLgRbigcho7xLM0GYj11+m29JR16:dVc7FTsom8RbiggoNo0GiOm29JRo

    Score
    8/10
    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks