Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

Precision ...mp.rar

windows7-x64

3

Precision ...mp.rar

windows10-2004-x64

Precision ...mp.exe

windows7-x64

1

Precision ...mp.exe

windows10-2004-x64

1

Precision ...ui.ini

windows7-x64

1

Precision ...ui.ini

windows10-2004-x64

1

Precision ...ut.txt

windows7-x64

1

Precision ...ut.txt

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Precision Free Temp.rar

  • Size

    571KB

  • Sample

    240904-hm497awcmj

  • MD5

    a6641f0e08f4657a34119adb39659bc7

  • SHA1

    2212fdd00ba430bc53abb06de39bb0864a9474f5

  • SHA256

    108338f8f8404c1efd1dd2255582fb3ed0b707ff66661e70a7b2b985764c6d5d

  • SHA512

    ee5f399110725ecae60615a9a403cd685ba1ff7c8a17c6a879639ca433ef25759f0143fdde6802d7b1ed0afb0702fe35d3afb95839caad64ad5a9ffcc7c60f8b

  • SSDEEP

    12288:vO7//4UNc1SKBuMKijwmjBAvQtTnLyEkboOoH7yI3UQehF:I/wUNcAmtwmjmiDwboOoUQSF

Score
8/10
discoverypersistenceprivilege_escalation

Malware Config

Targets

    • Target

      Precision Free Temp.rar

    • Size

      571KB

    • MD5

      a6641f0e08f4657a34119adb39659bc7

    • SHA1

      2212fdd00ba430bc53abb06de39bb0864a9474f5

    • SHA256

      108338f8f8404c1efd1dd2255582fb3ed0b707ff66661e70a7b2b985764c6d5d

    • SHA512

      ee5f399110725ecae60615a9a403cd685ba1ff7c8a17c6a879639ca433ef25759f0143fdde6802d7b1ed0afb0702fe35d3afb95839caad64ad5a9ffcc7c60f8b

    • SSDEEP

      12288:vO7//4UNc1SKBuMKijwmjBAvQtTnLyEkboOoH7yI3UQehF:I/wUNcAmtwmjmiDwboOoUQSF

    Score
    8/10
    discoverypersistenceprivilege_escalation

    • Downloads MZ/PE file

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

      persistenceprivilege_escalation

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      Precision Free Temp/Precision Free Temp.exe

    • Size

      1.2MB

    • MD5

      1e536b34196826a507bf8f3d89508923

    • SHA1

      2d7db3b661bacc16b013287b2e0f3818b8fa1347

    • SHA256

      5895a48062634acd6495284454a32f7e1ee940f30f507fd0deef4c6783833e79

    • SHA512

      00343ebe05da0dafddcaf698d1522b7574d6ae272ea37078bb1f2b3f0c87b1cbaccd181d4ce4465533c353fddc2405fd8a0f94d9ac3665a4a69eb899802ac03f

    • SSDEEP

      24576:DxowEp6y4nKAiJWRFYncBmP9aagTlbDPmUIgi7y:DegRnKAgW77gapln5f

    Score
    1/10
    behavioral3behavioral4

    • Target

      Precision Free Temp/imgui.ini

    • Size

      103B

    • MD5

      1d213d2e7cbd8a7d6f67061d992f3662

    • SHA1

      0c9227fc90ed4122a480700e73cb5644ced35e09

    • SHA256

      a07b5fd4b4207c3bff859ad80a957496f5005f52dc787817222bad12cb54c5a0

    • SHA512

      a24e7076f26d0ab71f3eb368118b1c63cd7198c2c3324f3f10a868343ba8a8e2395634363b1ff8e53d7f4d0f2236041e7cb7e7eb98acefb896628ba29f94c70d

    Score
    1/10
    behavioral5behavioral6

    • Target

      Precision Free Temp/tut.txt

    • Size

      344B

    • MD5

      12b33edc840b3fa20aa5abad940fe21c

    • SHA1

      634b6ae08c61bc380b7b80faef787bd00651f16a

    • SHA256

      c116841eb879be5984a35ecf0cbdc489f003e55529bf7050b9a519cf43e0cd7a

    • SHA512

      bd72537820b0fc1888f0083af857834cad28a54a71f96ed909bed0d272fb3b1440723a8a3fcd214f354cc33485c96bd335834c0aca58debdae6bb8c9f4a528b8

    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks