Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

5

AMTEmu-202...er.exe

windows7-x64

7

AMTEmu-202...er.exe

windows10-2004-x64

8

Resubmissions

Sharing

Copy URL
Twitter E-mail

General

  • Target

    AMTEmu-2024-Universal-Patcher.exe

  • Size

    1.5MB

  • Sample

    240603-3p7hjsdd8s

  • MD5

    3f9f6614d1502d1442774b96a79df79a

  • SHA1

    3c2fc76d135caa2ba3ac24681dda3cb6ac0dde61

  • SHA256

    5761e0a37a846b17d677454c4142a1c3ec9625dd5222085e71fe652b446baaba

  • SHA512

    6c8676875e57b5686adb92d1c0c267f371b75b1176cfcf5754db2aeaefa9ed762af19b7dd509bdebede03f939d848320810ace1ede4f2b0f7350a74d28908bff

  • SSDEEP

    24576:nrORE29TTVx8aBRd1h1orq+GWE0Jc5bDTj1Vyv9Tva6teZ4Co5qL5xRp/HhPRDH:n2EYTb8atv1orq+pEiSDTj1VyvBacCG6

Score
8/10
evasionexecution

Malware Config

Targets

    • Target

      AMTEmu-2024-Universal-Patcher.exe

    • Size

      1.5MB

    • MD5

      3f9f6614d1502d1442774b96a79df79a

    • SHA1

      3c2fc76d135caa2ba3ac24681dda3cb6ac0dde61

    • SHA256

      5761e0a37a846b17d677454c4142a1c3ec9625dd5222085e71fe652b446baaba

    • SHA512

      6c8676875e57b5686adb92d1c0c267f371b75b1176cfcf5754db2aeaefa9ed762af19b7dd509bdebede03f939d848320810ace1ede4f2b0f7350a74d28908bff

    • SSDEEP

      24576:nrORE29TTVx8aBRd1h1orq+GWE0Jc5bDTj1Vyv9Tva6teZ4Co5qL5xRp/HhPRDH:n2EYTb8atv1orq+pEiSDTj1VyvBacCG6

    Score
    8/10
    evasionexecution

    • Blocklisted process makes network request

    • Modifies Windows Firewall

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks