Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    MullvadVPN-2022.5.exe

  • Size

    83.0MB

  • Sample

    230701-pdndmsgg59

  • MD5

    e310795a547182c26ce9c5c2ef38a9ad

  • SHA1

    12395eb29d3aa0baa43373d52e06eda417bd1546

  • SHA256

    ff5813895e951467e761e24d12d74f49f0b81573961b8388c305afc28c50e7c6

  • SHA512

    3b8e004c7ef7a46c559ac45b18fff1b97d9a0be3aba541e408e4655b06cf96909bb336f58ff009b988a1f7eb29ee7031203673a0e2a53b29a45e9ea13436fc66

  • SSDEEP

    1572864:wTdHOujIgj4Tp2FoN3kBv5SYGTXTijH0rZRmL8x7NN+1L:w1OuXj42FGkJ5wXir8+S7NY

Malware Config

Targets

    • Target

      MullvadVPN-2022.5.exe

    • Size

      83.0MB

    • MD5

      e310795a547182c26ce9c5c2ef38a9ad

    • SHA1

      12395eb29d3aa0baa43373d52e06eda417bd1546

    • SHA256

      ff5813895e951467e761e24d12d74f49f0b81573961b8388c305afc28c50e7c6

    • SHA512

      3b8e004c7ef7a46c559ac45b18fff1b97d9a0be3aba541e408e4655b06cf96909bb336f58ff009b988a1f7eb29ee7031203673a0e2a53b29a45e9ea13436fc66

    • SSDEEP

      1572864:wTdHOujIgj4Tp2FoN3kBv5SYGTXTijH0rZRmL8x7NN+1L:w1OuXj42FGkJ5wXir8+S7NY

    • Modifies Installed Components in the registry

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks