Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    sync-installer.exe

  • Size

    47.2MB

  • Sample

    230604-r59gasce25

  • MD5

    3ec6f06cebbf559143794f86ded8fdea

  • SHA1

    77e2f0e0a59b72093bb65a26aa59ce061f3d5e3e

  • SHA256

    726e1acc63fcc6859f0d26d341a2a61cffcafb9eafdb39a27729103e7225d05b

  • SHA512

    53aea781de8230535f8c80ff2426d8092ea85ae79bc33532ccd7946ab5eb17faad98294939e34ec8955bd28dc557ccbf1c7a5c39e6583e1bc357dd8c34982917

  • SSDEEP

    786432:OaTrHQ8Vzeo30F+IJStJM5EIyFGGGGGGdfDn4s07xRFC3Mc9LSROtv06f0el3v:OaTrw8VeWQBJ+uAMsYRFC3FLSROG6f06

Score
8/10

Malware Config

Targets

    • Target

      sync-installer.exe

    • Size

      47.2MB

    • MD5

      3ec6f06cebbf559143794f86ded8fdea

    • SHA1

      77e2f0e0a59b72093bb65a26aa59ce061f3d5e3e

    • SHA256

      726e1acc63fcc6859f0d26d341a2a61cffcafb9eafdb39a27729103e7225d05b

    • SHA512

      53aea781de8230535f8c80ff2426d8092ea85ae79bc33532ccd7946ab5eb17faad98294939e34ec8955bd28dc557ccbf1c7a5c39e6583e1bc357dd8c34982917

    • SSDEEP

      786432:OaTrHQ8Vzeo30F+IJStJM5EIyFGGGGGGdfDn4s07xRFC3Mc9LSROtv06f0el3v:OaTrw8VeWQBJ+uAMsYRFC3FLSROG6f06

    Score
    8/10
    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v6

Tasks