Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.msi

  • Size

    1.3MB

  • Sample

    230414-gmfq6ahh7s

  • MD5

    4dc2623c126508c02a4e19da2a7982b3

  • SHA1

    5b735653dcf025c668e4bbbd5d439eebfef8fcda

  • SHA256

    77b07db364c5c3c48d3078785b9fe9a6f3e6b7fcb0fa7212b9b8b1ecc0a229b1

  • SHA512

    70b1b2eecddb5eb7fbd0ed2f8340cf9f1755119a18d3a8c1258e4e70d1688c485eeca3bad372196dee24ba89e8674cb36cdf468beb9283d9f66f11947fb66412

  • SSDEEP

    24576:HK+xLNJYB4cW7LIJ1MXCOJ05YbswFbf2d7xLZrudqAcr:HK6JYZqbCOJ05Yb59+zLZrudqAc

Score
8/10

Malware Config

Targets

    • Target

      file.msi

    • Size

      1.3MB

    • MD5

      4dc2623c126508c02a4e19da2a7982b3

    • SHA1

      5b735653dcf025c668e4bbbd5d439eebfef8fcda

    • SHA256

      77b07db364c5c3c48d3078785b9fe9a6f3e6b7fcb0fa7212b9b8b1ecc0a229b1

    • SHA512

      70b1b2eecddb5eb7fbd0ed2f8340cf9f1755119a18d3a8c1258e4e70d1688c485eeca3bad372196dee24ba89e8674cb36cdf468beb9283d9f66f11947fb66412

    • SSDEEP

      24576:HK+xLNJYB4cW7LIJ1MXCOJ05YbswFbf2d7xLZrudqAcr:HK6JYZqbCOJ05Yb59+zLZrudqAc

    Score
    8/10
    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks