Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
SteamSetup.exe
-
Size
2.3MB
-
Sample
240327-rxwkgaeb54
-
MD5
b1f4bc644f535c745341de0303631d9c
-
SHA1
8d66e30416004cc2e98334a276c181ae1e67be55
-
SHA256
5d8d697707c89466cfe203bde7e242680d020646bd5e49edaabd67fc6a7d6321
-
SHA512
e3fc8eed9061dd8c555a26c29436c7c5218c6409096e37d11b34edcab448d5c3e9f7dff5e5c5ab2a0e3ee96da666b3be7f2b3f028fc122f35f74c51518aa0d44
-
SSDEEP
49152:GDJvIRwCA97eXdXY1/aq95f9zRsBON2VGabSV9MbHv2XR3fHuc7ZEG5:vWC2KX5Y1X95VzvwpWVKrJW
Static task
static1
Behavioral task
behavioral1
Sample
SteamSetup.exe
Resource
win11-20240221-en
Malware Config
Targets
-
-
Target
SteamSetup.exe
-
Size
2.3MB
-
MD5
b1f4bc644f535c745341de0303631d9c
-
SHA1
8d66e30416004cc2e98334a276c181ae1e67be55
-
SHA256
5d8d697707c89466cfe203bde7e242680d020646bd5e49edaabd67fc6a7d6321
-
SHA512
e3fc8eed9061dd8c555a26c29436c7c5218c6409096e37d11b34edcab448d5c3e9f7dff5e5c5ab2a0e3ee96da666b3be7f2b3f028fc122f35f74c51518aa0d44
-
SSDEEP
49152:GDJvIRwCA97eXdXY1/aq95f9zRsBON2VGabSV9MbHv2XR3fHuc7ZEG5:vWC2KX5Y1X95VzvwpWVKrJW
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1