Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    UGEEWin_3.2.0.210804.zip

  • Size

    23.4MB

  • Sample

    230214-qjgcysde97

  • MD5

    b18e651512cf9173704889dffa2a2550

  • SHA1

    651cd93c70ef16637a922af0ed5ebff7e1a3997d

  • SHA256

    409abac20f532fa40edb621a31baf3bad11675b55a7e2f9972aa02f31ec7a57b

  • SHA512

    3b7b4e2c5737ebe613f05cda3791d843e5adec68a26c30f73e3377e7982b709a3b8165435b8a5c2c76cbcb7ef2045ee64c270bb542d4f7fbe4e7597be58da72e

  • SSDEEP

    393216:vLJLctB+l6+FLHba7+MyPutEcNe+UQGliYbZv8rpjUC/GzGNUN3r8quH3+q+ufIg:eP4NQhyGtEuzUQ6iYx8r1UC/GzhYZ+Uv

Malware Config

Targets

    • Target

      UGEEWin_3.2.0.210804.exe

    • Size

      23.5MB

    • MD5

      b4cacf19c6ffff4c6eb568336869372e

    • SHA1

      b938668629a78d373d850f7ffd555e5ebcb8c1d9

    • SHA256

      3102d27a70c41f2e2abf9ca9465608ea5887857abc5bf5cacb7528ae90825c63

    • SHA512

      436e6211ca9ab99a166f8ea20e657c77722c79873e28601e4385e692cb95ecd2fdc2f05e728e0f88d2f9e0d1881989a3c2e86e0fd3430270a69ab094150d9043

    • SSDEEP

      393216:eAvWn7A7CaB6VvWRO4YbAvrA7CaESq4Ie1fvydH5Ua7e3W3e5XNmy+zxuaA67UnQ:47sRh7Y0vrsRESBIe1ydZUa7e35cVA69

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks