Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ietabhelper1.msi

  • Size

    2.7MB

  • Sample

    230505-zjfwvsea39

  • MD5

    b1c30d1dc217abe02766593ffce63985

  • SHA1

    476f3cd4901df51d0aa00030647bdcf8410e81c0

  • SHA256

    85368f6f84b60af0e7dc5182bda967e4df4fe652a66e8999db18c72f07b04485

  • SHA512

    e7179d18076bb0896504b903f83ed08650cf2e2c0cb412005ff996f2bed1952d9b848d537954f7201b50ed437d47ff2e61323dc2476adbbde99384f3140b5a24

  • SSDEEP

    49152:jgc5Y5AHTjZXQGdA1LqwOZR+P48IIwZza9xmqR7Or7O6j1k7kWBUYYXbiEid:RY5At7dA9Oa48AZzaPcnj1qkWBUR

Score
8/10

Malware Config

Targets

    • Target

      ietabhelper1.msi

    • Size

      2.7MB

    • MD5

      b1c30d1dc217abe02766593ffce63985

    • SHA1

      476f3cd4901df51d0aa00030647bdcf8410e81c0

    • SHA256

      85368f6f84b60af0e7dc5182bda967e4df4fe652a66e8999db18c72f07b04485

    • SHA512

      e7179d18076bb0896504b903f83ed08650cf2e2c0cb412005ff996f2bed1952d9b848d537954f7201b50ed437d47ff2e61323dc2476adbbde99384f3140b5a24

    • SSDEEP

      49152:jgc5Y5AHTjZXQGdA1LqwOZR+P48IIwZza9xmqR7Or7O6j1k7kWBUYYXbiEid:RY5At7dA9Oa48AZzaPcnj1qkWBUR

    Score
    8/10
    • Blocklisted process makes network request

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks