Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    MinecraftInstaller.msi

  • Size

    2.2MB

  • Sample

    230205-tr7fwsdd8t

  • MD5

    16d3f94ba8d38a212ef92277404754ec

  • SHA1

    eb9ab8cffb6aad1c1263bf224fc5bb700d16515f

  • SHA256

    688b5b5478ed0b53ff9ca7a7ce9290a865294b9476b68401f104a974cd14b742

  • SHA512

    6c34d6bbce7b0d5c2e0a995fe4585cf69d0964beabcc6381ed731f67738c7a154bc69f7a0dd76386ae44a1d54e0216abc95deead1983d35c8fca67dbe987f304

  • SSDEEP

    24576:iM3SlUxz8F2xvXI+h9WxLUWeSKGEk1sMW9LTV7o+0+n/GvmWInE0WTM9AudAUYvt:tmP2xg+7oAsEk1sMyLT2+/Wmo0Wfb

Score
8/10
upx

Malware Config

Targets

    • Target

      MinecraftInstaller.msi

    • Size

      2.2MB

    • MD5

      16d3f94ba8d38a212ef92277404754ec

    • SHA1

      eb9ab8cffb6aad1c1263bf224fc5bb700d16515f

    • SHA256

      688b5b5478ed0b53ff9ca7a7ce9290a865294b9476b68401f104a974cd14b742

    • SHA512

      6c34d6bbce7b0d5c2e0a995fe4585cf69d0964beabcc6381ed731f67738c7a154bc69f7a0dd76386ae44a1d54e0216abc95deead1983d35c8fca67dbe987f304

    • SSDEEP

      24576:iM3SlUxz8F2xvXI+h9WxLUWeSKGEk1sMW9LTV7o+0+n/GvmWInE0WTM9AudAUYvt:tmP2xg+7oAsEk1sMyLT2+/Wmo0Wfb

    Score
    8/10
    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks