Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

12/06/2023, 11:30

230612-nmbkrsbg73 8

12/06/2023, 11:20

230612-nfjykacc8v 1

General

  • Target

    https://get-kmspico.com/download-kmspico-11/

  • Sample

    230612-nmbkrsbg73

Malware Config

Targets

    • Target

      https://get-kmspico.com/download-kmspico-11/

    • Creates new service(s)

    • Possible privilege escalation attempt

    • Sets file execution options in registry

    • Executes dropped EXE

    • Modifies file permissions

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks