Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    EpicInstaller-14.6.2.msi

  • Size

    154.0MB

  • Sample

    240227-xymlvahb99

  • MD5

    b3f139169eb9d73305ed21d81b848971

  • SHA1

    0bedef04cef1cc1d9ceeea3fb81568046f81d1eb

  • SHA256

    560eb6d037b8058dd395d3abc052718d5b24dcdafb132bdcfe9430d1a8cdcfff

  • SHA512

    9be94c912158972ba930b74d34c44b8ef688f18829f3e264acd812f399c48974323bf41a82b0e8bfd7e1c050aad91c417578b80de1b0c343b8f7b4ac0e83ff94

  • SSDEEP

    3145728:KyQg/s3bfGfmiNmUY8tjne1fi95W6Kf6xY0YYO1mSXQWOGo/4yG:LEL4mYY8tjguRKCxIY/WOGo/4yG

Score
8/10

Malware Config

Targets

    • Target

      EpicInstaller-14.6.2.msi

    • Size

      154.0MB

    • MD5

      b3f139169eb9d73305ed21d81b848971

    • SHA1

      0bedef04cef1cc1d9ceeea3fb81568046f81d1eb

    • SHA256

      560eb6d037b8058dd395d3abc052718d5b24dcdafb132bdcfe9430d1a8cdcfff

    • SHA512

      9be94c912158972ba930b74d34c44b8ef688f18829f3e264acd812f399c48974323bf41a82b0e8bfd7e1c050aad91c417578b80de1b0c343b8f7b4ac0e83ff94

    • SSDEEP

      3145728:KyQg/s3bfGfmiNmUY8tjne1fi95W6Kf6xY0YYO1mSXQWOGo/4yG:LEL4mYY8tjguRKCxIY/WOGo/4yG

    Score
    8/10
    • Blocklisted process makes network request

    • Modifies file permissions

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks