Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

VineMEMZ-Original.exe

windows10-1703-x64

8

VineMEMZ-Original.exe

windows10-2004-x64

8

Resubmissions

28/06/2024, 02:19

240628-cr3n9swcqg 8

21/06/2024, 17:11

240621-vqpecsscqk 8

20/06/2024, 14:32

240620-rwkftasdmc 8

13/06/2024, 21:29

240613-1cbh8svbkm 8

13/06/2024, 21:24

240613-z9bptszhke 8

13/06/2024, 21:01

240613-ztvsrszdre 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VineMEMZ-Original.exe

  • Size

    39.6MB

  • Sample

    240613-1cbh8svbkm

  • MD5

    b949ba30eb82cc79eeb7c2d64f483bcb

  • SHA1

    8361089264726bb6cff752b3c137fde6d01f4d80

  • SHA256

    5f6a8f0e85704eb30340a872eec136623e57ab014b4dd165c68dd8cd76143923

  • SHA512

    e2acd4fe7627e55be3e019540269033f65d4954831a732d7a4bd50607260cd2a238832f604fa344f04be9f70e8757a9f2d797de37b440159a16bf3a6359a759b

  • SSDEEP

    786432:1fhwEXgLYTou24XbHzjkgV5bQAH/AbkP1hn0qPQPrhBPC7wYqljbdPIa:dqgb84DPn5vhbIPdZaWljbdPIa

Score
8/10
bootkitpersistenceransomware

Malware Config

Targets

    • Target

      VineMEMZ-Original.exe

    • Size

      39.6MB

    • MD5

      b949ba30eb82cc79eeb7c2d64f483bcb

    • SHA1

      8361089264726bb6cff752b3c137fde6d01f4d80

    • SHA256

      5f6a8f0e85704eb30340a872eec136623e57ab014b4dd165c68dd8cd76143923

    • SHA512

      e2acd4fe7627e55be3e019540269033f65d4954831a732d7a4bd50607260cd2a238832f604fa344f04be9f70e8757a9f2d797de37b440159a16bf3a6359a759b

    • SSDEEP

      786432:1fhwEXgLYTou24XbHzjkgV5bQAH/AbkP1hn0qPQPrhBPC7wYqljbdPIa:dqgb84DPn5vhbIPdZaWljbdPIa

    Score
    8/10
    bootkitpersistenceransomware

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks