Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

Affinity_P...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Affinity_Publisher.exe

  • Size

    546.4MB

  • Sample

    230317-19jwwaab95

  • MD5

    24ac9e74dbb18f85a40fdcee33f3fe85

  • SHA1

    fa0ddda57c294801e9b508bcfa65133862a20477

  • SHA256

    ed86449699f747df89fe64a51ec54b38c8b2ed032f7b2ef39dc83f0b7c78b37c

  • SHA512

    2fcb12aca81506ef4ae05ce1e89447b6e9fce6d36aa63d7bce0a6075f22d7eb746d7e0f7f61f760fb9ff3f1320cc33c3250fed180a2935183c3ccc741dbbd568

  • SSDEEP

    12582912:3IUQIkjecHjCPjFbedUH+SO4NaM790yFoI/Gqg3D/cH:YU6tOYUHTr9nv/Vg3rE

Score
7/10

Malware Config

Targets

    • Target

      Affinity_Publisher.exe

    • Size

      546.4MB

    • MD5

      24ac9e74dbb18f85a40fdcee33f3fe85

    • SHA1

      fa0ddda57c294801e9b508bcfa65133862a20477

    • SHA256

      ed86449699f747df89fe64a51ec54b38c8b2ed032f7b2ef39dc83f0b7c78b37c

    • SHA512

      2fcb12aca81506ef4ae05ce1e89447b6e9fce6d36aa63d7bce0a6075f22d7eb746d7e0f7f61f760fb9ff3f1320cc33c3250fed180a2935183c3ccc741dbbd568

    • SSDEEP

      12582912:3IUQIkjecHjCPjFbedUH+SO4NaM790yFoI/Gqg3D/cH:YU6tOYUHTr9nv/Vg3rE

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks