Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9lvsf.Stardock.Fences.5.04.x64.Multilingual.rar
-
Size
13.5MB
-
Sample
231223-hteccaeeap
-
MD5
ed1a0d318f78fd7ee33309fb4eb5f7f2
-
SHA1
61666c6154b8881d5abf4c4c73d2c5478256874c
-
SHA256
aef7f8d55e7fd11061fad8de61424602930a11cc758e3a0aacf6858aae3394f9
-
SHA512
d7e0c860630b7910951c367ad7afbf47122f59f669221f37ac8df637065403ed3072520c84084c9221ae74f850901cfda18714a9b60bac0a8c483ecb7c476a9b
-
SSDEEP
196608:CTWNaqQ8EuKAvWWqq1Q4mpMLjaceFLxbOZ92N6Ms5rE+vQrFvrfXvQdrIP0:OWAPmWWR1apUaceFL9Wm6o+UFvrfYq0
Static task
static1
Behavioral task
behavioral1
Sample
AMPED/AMPED.txt
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
AMPED/AMPED.txt
-
Size
104B
-
MD5
4ca637758356b1127e8d265b842b6307
-
SHA1
c49ad61dbfd99052060b2e1f16e09f94d09f7141
-
SHA256
224a4e40ac827974d15fadefd26769c2b65b85698901615af9af3ea3bba23bcf
-
SHA512
a3d9226ac77908a6a3aa834cb1aceeaf74baaf4c2921e63ec669e42d25a6b288b7683a0a92487001cfc6271b29874530e42759f433d9beb07213fbc360d3c7c2
Score8/10-
Modifies Shared Task Scheduler registry keys
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Modifies system executable filetype association
-
Registers COM server for autorun
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
3Event Triggered Execution
1Change Default File Association
1