Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

PUABundler...ed.exe

windows10-1703-x64

8

PUABundler...ed.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PUABundler;Win32.YandexBundled.zip

  • Size

    18.1MB

  • Sample

    240607-2kmf5see68

  • MD5

    8836e503ede8f5eae818e25d34c9a091

  • SHA1

    2b1f02ae5252eb2832fec2d0135b2b1ea0e3c77e

  • SHA256

    3f3ed380c397b0219044c5a5d034a57de303fef33c5690f404d078764f0379a7

  • SHA512

    0e5fe1819af70ab90d2d56d15af14de27396afc7439c3644e1e040140c20e7b5f325dfc46c943bfb864fff8f2b6a017e2d2b05bdd88b63ea0c1c8cf7678decec

  • SSDEEP

    393216:XHPcaisf7RPFYHxsfErl0jLBlzILETrkmD0iIP+lfaH32/rFz++5Z:XHEKfVlfeQfqCrB0bP+cyBb5Z

Score
8/10
discovery

Malware Config

Targets

    • Target

      PUABundler;Win32.YandexBundled.exe

    • Size

      21.9MB

    • MD5

      eb097da8c02518caa32dc73e9d25f8ed

    • SHA1

      75b3dd063526967a1d7b1c3d49da2405bf81cb01

    • SHA256

      547e600f946a8aea9386a3e24e01aa9ff179ba172cbf2e753b36e15856263f6d

    • SHA512

      36407173d3ce17de864de1c7a0b6d34d9c2e521a8b5c5aacae12759fa0202273de5e4e7b87f8d91d192350e1f94438cf79f6444ca01c40799584fc30861624d7

    • SSDEEP

      393216:v7W/rMOomNrtrt4NINdh5z5MXzlYbNSNZBdAVaRtedFq7N/EN2otPYfTy1P6eyQg:+n/Nh7B2R0yZahyyMIFpc

    Score
    8/10
    discovery

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks