Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    AOMEI Partition Assistant 9.13.1 TE.exe

  • Size

    31.4MB

  • Sample

    230105-bpqfgsad84

  • MD5

    2d32ebb9ed396390d62ead074ea08b35

  • SHA1

    0b9ef7f639bf26d8c14b03ed87cd0d69a308916c

  • SHA256

    7eae2737c72a73443f9f473c6eacd12b63e1a48acc37a4ab94c2b12a121620bf

  • SHA512

    1fb7018fd4d994e7943ddaa8619d23b33b30716053cb63710df1e13c491a3f76637e4f750089eca0f22d50a06c456782bfd306cc37a8a2ca0a7ae57f63089b48

  • SSDEEP

    786432:oSOKZJymumtv/Z+D8U+r98dfZBGvjx1sRkdn:pZJ8uZI0uZBG7iKn

Score
8/10

Malware Config

Targets

    • Target

      AOMEI Partition Assistant 9.13.1 TE.exe

    • Size

      31.4MB

    • MD5

      2d32ebb9ed396390d62ead074ea08b35

    • SHA1

      0b9ef7f639bf26d8c14b03ed87cd0d69a308916c

    • SHA256

      7eae2737c72a73443f9f473c6eacd12b63e1a48acc37a4ab94c2b12a121620bf

    • SHA512

      1fb7018fd4d994e7943ddaa8619d23b33b30716053cb63710df1e13c491a3f76637e4f750089eca0f22d50a06c456782bfd306cc37a8a2ca0a7ae57f63089b48

    • SSDEEP

      786432:oSOKZJymumtv/Z+D8U+r98dfZBGvjx1sRkdn:pZJ8uZI0uZBG7iKn

    Score
    8/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks