Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Hearts of Iron IV update 1.12.1 - 1.12.10.exe

  • Size

    24.9MB

  • Sample

    230302-wlgz6adf81

  • MD5

    ee2821412ef8ae4677c71b1fef169e8f

  • SHA1

    e16366789e3930f77bcfb5322eb8811fc83dbeca

  • SHA256

    941de0ebb9425900272204a036579d21abcd082c3f30cb81afea7ce250f90338

  • SHA512

    e54ad170c5d028bf67b50a47adcdb90ea84860558ad01645fa1ba66b90d4331de7b1f91aadbd5ab37802a84dfbf7905e31562440dea356c5539b25e077584bc7

  • SSDEEP

    393216:D0bnD8ocxXuXo1IeXwMHSgczJH9jQ8L+gfsQNq9eTrgc/1v6YdpRrpNd2:D0bn2+X+IcXygck4jUQQcdv6YXDv2

Malware Config

Targets

    • Target

      Hearts of Iron IV update 1.12.1 - 1.12.10.exe

    • Size

      24.9MB

    • MD5

      ee2821412ef8ae4677c71b1fef169e8f

    • SHA1

      e16366789e3930f77bcfb5322eb8811fc83dbeca

    • SHA256

      941de0ebb9425900272204a036579d21abcd082c3f30cb81afea7ce250f90338

    • SHA512

      e54ad170c5d028bf67b50a47adcdb90ea84860558ad01645fa1ba66b90d4331de7b1f91aadbd5ab37802a84dfbf7905e31562440dea356c5539b25e077584bc7

    • SSDEEP

      393216:D0bnD8ocxXuXo1IeXwMHSgczJH9jQ8L+gfsQNq9eTrgc/1v6YdpRrpNd2:D0bn2+X+IcXygck4jUQQcdv6YXDv2

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks