Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

PlayniteInstaller.exe

windows7-x64

6

PlayniteInstaller.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PlayniteInstaller.exe

  • Size

    248KB

  • Sample

    230525-zhvzdscc85

  • MD5

    216721738f08fbd3b233e07619950619

  • SHA1

    08c9849bfc78aa4f8f358cbf2301598fdb48620f

  • SHA256

    2b2ff0f08c60f44ce321573ce0f00a44e336538775735a8f5d6644a12b46124f

  • SHA512

    24d6f3e6cd9b823169cdcce8977f03b38a7b9579ff8c65257570de9aeb440cf966fc2c571d9de363d10eead47a49c58bf4d55f9ae2860a0fea76cc84e77426cf

  • SSDEEP

    3072:xNi5RzqbBZCKzSU/8+xFO0AtqtCi2yJir3YgECNWmkCK2yJir3YgECNWmTN8lQx1:7iDzqfoKtO0Atq6Z

Score
8/10
discovery

Malware Config

Targets

    • Target

      PlayniteInstaller.exe

    • Size

      248KB

    • MD5

      216721738f08fbd3b233e07619950619

    • SHA1

      08c9849bfc78aa4f8f358cbf2301598fdb48620f

    • SHA256

      2b2ff0f08c60f44ce321573ce0f00a44e336538775735a8f5d6644a12b46124f

    • SHA512

      24d6f3e6cd9b823169cdcce8977f03b38a7b9579ff8c65257570de9aeb440cf966fc2c571d9de363d10eead47a49c58bf4d55f9ae2860a0fea76cc84e77426cf

    • SSDEEP

      3072:xNi5RzqbBZCKzSU/8+xFO0AtqtCi2yJir3YgECNWmkCK2yJir3YgECNWmTN8lQx1:7iDzqfoKtO0Atq6Z

    Score
    8/10
    discovery

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks