Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ChatGPT_0.10.1_x64_en-US.msi

  • Size

    6.0MB

  • Sample

    230131-c1x55sga6t

  • MD5

    237ad33a7db9992265fc627e1c227dad

  • SHA1

    19c6dbd6b1e5d72fc18a9be8c770b3bd0ab7d9d4

  • SHA256

    f47a330a14633877ef5f7e369a0a03d39a07f8d0d3fa598bc0c3a14d531698b2

  • SHA512

    f519965e9c1e1b808d1a2c8a1ba9fab620b46e0886cc1e5b160c940150d11199c76f03c77e3cf67485533cfb7a85070ee412a67a7f335bc38594fba66d1f2a49

  • SSDEEP

    98304:9XFfpx4bo2QblH/ucPg9ZMZ2cs1Bhq6yJrfy7dvBMCXEaFrM3BBTleaRr3:9Xfx4b2lHgTc20Tw+CXEaFWblz1

Malware Config

Targets

    • Target

      ChatGPT_0.10.1_x64_en-US.msi

    • Size

      6.0MB

    • MD5

      237ad33a7db9992265fc627e1c227dad

    • SHA1

      19c6dbd6b1e5d72fc18a9be8c770b3bd0ab7d9d4

    • SHA256

      f47a330a14633877ef5f7e369a0a03d39a07f8d0d3fa598bc0c3a14d531698b2

    • SHA512

      f519965e9c1e1b808d1a2c8a1ba9fab620b46e0886cc1e5b160c940150d11199c76f03c77e3cf67485533cfb7a85070ee412a67a7f335bc38594fba66d1f2a49

    • SSDEEP

      98304:9XFfpx4bo2QblH/ucPg9ZMZ2cs1Bhq6yJrfy7dvBMCXEaFrM3BBTleaRr3:9Xfx4b2lHgTc20Tw+CXEaFWblz1

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Registers COM server for autorun

    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks