Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    PrimaryInteropAssembly.exe

  • Size

    6.3MB

  • Sample

    230627-2arywagf21

  • MD5

    2ebeb31f8ee253419906ca1c20fc807f

  • SHA1

    82acccd5a1e3944b7d6da84ece03070a51e89def

  • SHA256

    7b3b21b2fc2cfa707ad58c5a3e57fcfd16914ebdb9d634dcc711785843d5cc19

  • SHA512

    19f98284b4471155b4b75581d59b8bc8fa3c8fcf18e4dfe3d3d963c05e2aff7ac5d2f6f175c9a6858fa224cae9f795b675d667f0492fbbbe7e8d576156aae6d8

  • SSDEEP

    196608:PmGMoxY8gmavHF2+8moxPSuaChYeZreeqdTU553:Pm/FPz8moxPlaCLreJdm3

Score
8/10

Malware Config

Targets

    • Target

      PrimaryInteropAssembly.exe

    • Size

      6.3MB

    • MD5

      2ebeb31f8ee253419906ca1c20fc807f

    • SHA1

      82acccd5a1e3944b7d6da84ece03070a51e89def

    • SHA256

      7b3b21b2fc2cfa707ad58c5a3e57fcfd16914ebdb9d634dcc711785843d5cc19

    • SHA512

      19f98284b4471155b4b75581d59b8bc8fa3c8fcf18e4dfe3d3d963c05e2aff7ac5d2f6f175c9a6858fa224cae9f795b675d667f0492fbbbe7e8d576156aae6d8

    • SSDEEP

      196608:PmGMoxY8gmavHF2+8moxPSuaChYeZreeqdTU553:Pm/FPz8moxPlaCLreJdm3

    Score
    8/10
    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks