Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2010kaiser flstudio_10.0.9c Package Installer.exe

  • Size

    248.3MB

  • Sample

    240602-22p9csad2t

  • MD5

    c7ba5e64a5c5a18fa5ddc1a167271591

  • SHA1

    8fc5b5d75048c5945c75bac55ad61049e7b605f3

  • SHA256

    6e2a2c4bf443fbb948a9fe8793074d98076e8b8c46216ca8a8f90845bcd58f00

  • SHA512

    e40ed4b68c83359bae971399c64450116d49fa22312b3d26c8605a8a1264cb388bf89976edd863232f0993d9aa81288439b2fed11cdbf444aa5eae28bb9b9ad9

  • SSDEEP

    6291456:3faEHcidju+i7aSNWxu2RwbArjth2m2krk9pD:3yDWxi7aSNWPRWArjH2m2tD

Malware Config

Targets

    • Target

      2010kaiser flstudio_10.0.9c Package Installer.exe

    • Size

      248.3MB

    • MD5

      c7ba5e64a5c5a18fa5ddc1a167271591

    • SHA1

      8fc5b5d75048c5945c75bac55ad61049e7b605f3

    • SHA256

      6e2a2c4bf443fbb948a9fe8793074d98076e8b8c46216ca8a8f90845bcd58f00

    • SHA512

      e40ed4b68c83359bae971399c64450116d49fa22312b3d26c8605a8a1264cb388bf89976edd863232f0993d9aa81288439b2fed11cdbf444aa5eae28bb9b9ad9

    • SSDEEP

      6291456:3faEHcidju+i7aSNWxu2RwbArjth2m2krk9pD:3yDWxi7aSNWPRWArjH2m2tD

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks