Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    uzuitweaker.bat

  • Size

    269KB

  • Sample

    240615-mm1n8axdjb

  • MD5

    4fdaf3cd91ae7b5e3449d7241af817cb

  • SHA1

    c64d0beb6b8cdb1aafc2531ebc468903dfde4987

  • SHA256

    2d2731bd9d060d0bf2fd52ac5462162001373af531230170ec8fab91d6c8ccc5

  • SHA512

    650b6b2b2fcef9ff76e709970285ad39b11725858bf22fdc0f944a3db532eb162ff1e5a9d101bbc4ea35e657bc95c969a4a39455f5c504ec38f1ac7a1731a5df

  • SSDEEP

    3072:kTyaMIGoNed862q9BMiyRa3bbDvYPGfya2iiE1h:RvoNed8gBSR0YPGf/2iiE1h

Score
8/10

Malware Config

Targets

    • Target

      uzuitweaker.bat

    • Size

      269KB

    • MD5

      4fdaf3cd91ae7b5e3449d7241af817cb

    • SHA1

      c64d0beb6b8cdb1aafc2531ebc468903dfde4987

    • SHA256

      2d2731bd9d060d0bf2fd52ac5462162001373af531230170ec8fab91d6c8ccc5

    • SHA512

      650b6b2b2fcef9ff76e709970285ad39b11725858bf22fdc0f944a3db532eb162ff1e5a9d101bbc4ea35e657bc95c969a4a39455f5c504ec38f1ac7a1731a5df

    • SSDEEP

      3072:kTyaMIGoNed862q9BMiyRa3bbDvYPGfya2iiE1h:RvoNed8gBSR0YPGf/2iiE1h

    Score
    8/10
    • Modifies Installed Components in the registry

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks