Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ForecastProTRAC.msi

  • Size

    191.8MB

  • Sample

    230705-pscwfscc48

  • MD5

    bc98397c6bd123870fd6160d2cc936b9

  • SHA1

    eea0b42bb9df3fdb394a8d120ab13219b2db9bcd

  • SHA256

    1676c13bfdade1612674df394bb54c98fe23587725cd644607e300fa2045db68

  • SHA512

    957e9a05b40f40f2c63756d0dc6da8aada0ee312230c7c05adb3ff24c4187650117ea1358197ab43f504ebabc80709a4458260833bd7960fa400dede620fc6ab

  • SSDEEP

    3145728:rLkhnhzN3kOwjLw6CYyITL3P6Eo0ViGoiRbmZmoXwarZ5+k5NzwpFD2EpY4i:fynhzOFjLw6V1TOEo0SiR5NyZ5NzwyN

Score
8/10

Malware Config

Targets

    • Target

      ForecastProTRAC.msi

    • Size

      191.8MB

    • MD5

      bc98397c6bd123870fd6160d2cc936b9

    • SHA1

      eea0b42bb9df3fdb394a8d120ab13219b2db9bcd

    • SHA256

      1676c13bfdade1612674df394bb54c98fe23587725cd644607e300fa2045db68

    • SHA512

      957e9a05b40f40f2c63756d0dc6da8aada0ee312230c7c05adb3ff24c4187650117ea1358197ab43f504ebabc80709a4458260833bd7960fa400dede620fc6ab

    • SSDEEP

      3145728:rLkhnhzN3kOwjLw6CYyITL3P6Eo0ViGoiRbmZmoXwarZ5+k5NzwpFD2EpY4i:fynhzOFjLw6V1TOEo0SiR5NyZ5NzwyN

    Score
    8/10
    • Blocklisted process makes network request

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks