Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

Open-EID-2...39.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Open-EID-23.5.0.1939.exe

  • Size

    888KB

  • Sample

    230713-hf5mdaff27

  • MD5

    3e89bf19469ec8e19ee00c6062e97883

  • SHA1

    141190992e5e4e79471cfba966c1cd611d3a5dd8

  • SHA256

    a9bc3c7b7ae1dcdb8bbfd8bbb2affef82c0810dd0db288cbac416877967e47cb

  • SHA512

    19e3590ec1819cd9b71cc8d76385bf6a78aae90d84c30591692e6230df42a869441125668672c8936c88e401aacd45215d3d3d4964dbb74651238b97ed768e19

  • SSDEEP

    24576:wNsfiTdYSuVzZH9tH1v16NrqSemdvrqSemX:ET2pZ1ieSemdveSemX

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      Open-EID-23.5.0.1939.exe

    • Size

      888KB

    • MD5

      3e89bf19469ec8e19ee00c6062e97883

    • SHA1

      141190992e5e4e79471cfba966c1cd611d3a5dd8

    • SHA256

      a9bc3c7b7ae1dcdb8bbfd8bbb2affef82c0810dd0db288cbac416877967e47cb

    • SHA512

      19e3590ec1819cd9b71cc8d76385bf6a78aae90d84c30591692e6230df42a869441125668672c8936c88e401aacd45215d3d3d4964dbb74651238b97ed768e19

    • SSDEEP

      24576:wNsfiTdYSuVzZH9tH1v16NrqSemdvrqSemX:ET2pZ1ieSemdveSemX

    Score
    8/10
    discoverypersistence

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks