Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ChromeSetup.exe
-
Size
1.3MB
-
Sample
240802-wwz9gsvbmn
-
MD5
ba22f82b2b859b7fe9911b70415914c8
-
SHA1
8fc3548c5c93ac2199fe5d7519f4be61d45a4055
-
SHA256
82135867a32714ebda8b12ce5e787fd372b3e10ec4450f6e27c3d50a936a529d
-
SHA512
4289a0059b4c1b6370062ac70f1703e59ef17d7d10c021a4ab57486819a20ceaf3e022b2ce0837c4fb1f18246b2f30a83105d98fe49e6903812620b44e46dbf7
-
SSDEEP
24576:PJvK78SzsMZCRMp8nFNJ3dcj7zql5Tnoo6WOnLpymOovCce36Ft6pAlxzIBaGq:FK783MoXnFv3dcj7q5LsLp3CceMuczXr
Static task
static1
Behavioral task
behavioral1
Sample
ChromeSetup.exe
Resource
win10v2004-20240802-de
Malware Config
Targets
-
-
Target
ChromeSetup.exe
-
Size
1.3MB
-
MD5
ba22f82b2b859b7fe9911b70415914c8
-
SHA1
8fc3548c5c93ac2199fe5d7519f4be61d45a4055
-
SHA256
82135867a32714ebda8b12ce5e787fd372b3e10ec4450f6e27c3d50a936a529d
-
SHA512
4289a0059b4c1b6370062ac70f1703e59ef17d7d10c021a4ab57486819a20ceaf3e022b2ce0837c4fb1f18246b2f30a83105d98fe49e6903812620b44e46dbf7
-
SSDEEP
24576:PJvK78SzsMZCRMp8nFNJ3dcj7zql5Tnoo6WOnLpymOovCce36Ft6pAlxzIBaGq:FK783MoXnFv3dcj7q5LsLp3CceMuczXr
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Event Triggered Execution: Image File Execution Options Injection
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
2Component Object Model Hijacking
1Image File Execution Options Injection
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
2Component Object Model Hijacking
1Image File Execution Options Injection
1