Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Porofessor.gg - Installer.exe

  • Size

    2.3MB

  • Sample

    230205-x335dsae63

  • MD5

    67c1ae7ef0d47a91e30f2c5e7a708088

  • SHA1

    e338cabdfb50b6d5661e84c6ae85ae9858eef2a4

  • SHA256

    f043d8610a456d4f996f5d4beb12d6c84e77d2fc721e88e6833afb0ff81a9b10

  • SHA512

    3b405673113f6ad14555d4cb79fe9d004dc4e14459205b47392628136476901ed637624bbff6de99822abb35e5053bc2c895e726f6c3cfa83e7870408b5f3ccd

  • SSDEEP

    49152:REQxE87vxpsrFpIvNWdUtkXC8F5XZs0YpjoRUcT:R/PN+TIvNJtWCaZaaC

Malware Config

Targets

    • Target

      Porofessor.gg - Installer.exe

    • Size

      2.3MB

    • MD5

      67c1ae7ef0d47a91e30f2c5e7a708088

    • SHA1

      e338cabdfb50b6d5661e84c6ae85ae9858eef2a4

    • SHA256

      f043d8610a456d4f996f5d4beb12d6c84e77d2fc721e88e6833afb0ff81a9b10

    • SHA512

      3b405673113f6ad14555d4cb79fe9d004dc4e14459205b47392628136476901ed637624bbff6de99822abb35e5053bc2c895e726f6c3cfa83e7870408b5f3ccd

    • SSDEEP

      49152:REQxE87vxpsrFpIvNWdUtkXC8F5XZs0YpjoRUcT:R/PN+TIvNJtWCaZaaC

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks