Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

Wazuh Install.ps1

windows10-2004-x64

8

Resubmissions

09/01/2023, 16:39

230109-t5zyzaad2s 8

09/01/2023, 16:35

230109-t31gqaac9w 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Wazuh Install.ps1

  • Size

    296B

  • Sample

    230109-t31gqaac9w

  • MD5

    3f99c05d4b660bac5a9b6d8deecd88a2

  • SHA1

    1e03681fd9d31ad38884f71ef2580ffac66f4f6e

  • SHA256

    e2f4ac2297fd71094aeb931c4591a232154ac669f71586fbd8ec5e1df5b0fd01

  • SHA512

    4051931263429a11906a74b284c786459ec15e26095b9e7a6535df04bf8791d4107b23dd1cd5fc21e02fb7d1ac58a63d363d6fc7ae5b6cecb115a8283d256ac8

Score
8/10
discovery

Malware Config

Targets

    • Target

      Wazuh Install.ps1

    • Size

      296B

    • MD5

      3f99c05d4b660bac5a9b6d8deecd88a2

    • SHA1

      1e03681fd9d31ad38884f71ef2580ffac66f4f6e

    • SHA256

      e2f4ac2297fd71094aeb931c4591a232154ac669f71586fbd8ec5e1df5b0fd01

    • SHA512

      4051931263429a11906a74b284c786459ec15e26095b9e7a6535df04bf8791d4107b23dd1cd5fc21e02fb7d1ac58a63d363d6fc7ae5b6cecb115a8283d256ac8

    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks