Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    CV7Setup.exe

  • Size

    59.2MB

  • Sample

    230131-en6mvsee69

  • MD5

    e6a27a637fd827930f97f5de0659e888

  • SHA1

    00ba2f84b8831cefde7470a5730515171eb302a2

  • SHA256

    c2bb4e8d87a8cfea7b76b171cf3f87277e2a872df23b9fa31909bfb2d5fe87c3

  • SHA512

    31c74bc0fdfa4740c3046667648a54604138982fedbe6b4cd72a2335c257c4198bda3e826c1065f1d1e7de9e7c3d6e90d37999a5b948670fa87db517879b3c48

  • SSDEEP

    1572864:LOx54X+LYP+/mm/kAQ9GQ/KfyLhsL9BFh3LfnMYMmmj:LdXBmem/kAe3OyNsL9BFlLMY2j

Malware Config

Targets

    • Target

      CV7Setup.exe

    • Size

      59.2MB

    • MD5

      e6a27a637fd827930f97f5de0659e888

    • SHA1

      00ba2f84b8831cefde7470a5730515171eb302a2

    • SHA256

      c2bb4e8d87a8cfea7b76b171cf3f87277e2a872df23b9fa31909bfb2d5fe87c3

    • SHA512

      31c74bc0fdfa4740c3046667648a54604138982fedbe6b4cd72a2335c257c4198bda3e826c1065f1d1e7de9e7c3d6e90d37999a5b948670fa87db517879b3c48

    • SSDEEP

      1572864:LOx54X+LYP+/mm/kAQ9GQ/KfyLhsL9BFh3LfnMYMmmj:LdXBmem/kAe3OyNsL9BFlLMY2j

    • Executes dropped EXE

    • Modifies Windows Firewall

    • Registers COM server for autorun

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks