Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
8Static
static
3Precision ...mp.rar
windows7-x64
3Precision ...mp.rar
windows10-2004-x64
Precision ...mp.exe
windows7-x64
1Precision ...mp.exe
windows10-2004-x64
1Precision ...ui.ini
windows7-x64
1Precision ...ui.ini
windows10-2004-x64
1Precision ...ut.txt
windows7-x64
1Precision ...ut.txt
windows10-2004-x64
1General
-
Target
Precision Free Temp.rar
-
Size
571KB
-
Sample
240904-hm497awcmj
-
MD5
a6641f0e08f4657a34119adb39659bc7
-
SHA1
2212fdd00ba430bc53abb06de39bb0864a9474f5
-
SHA256
108338f8f8404c1efd1dd2255582fb3ed0b707ff66661e70a7b2b985764c6d5d
-
SHA512
ee5f399110725ecae60615a9a403cd685ba1ff7c8a17c6a879639ca433ef25759f0143fdde6802d7b1ed0afb0702fe35d3afb95839caad64ad5a9ffcc7c60f8b
-
SSDEEP
12288:vO7//4UNc1SKBuMKijwmjBAvQtTnLyEkboOoH7yI3UQehF:I/wUNcAmtwmjmiDwboOoUQSF
Static task
static1
Behavioral task
behavioral1
Sample
Precision Free Temp.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Precision Free Temp.rar
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Precision Free Temp/Precision Free Temp.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Precision Free Temp/Precision Free Temp.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Precision Free Temp/imgui.ini
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Precision Free Temp/imgui.ini
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Precision Free Temp/tut.txt
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Precision Free Temp/tut.txt
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
Precision Free Temp.rar
-
Size
571KB
-
MD5
a6641f0e08f4657a34119adb39659bc7
-
SHA1
2212fdd00ba430bc53abb06de39bb0864a9474f5
-
SHA256
108338f8f8404c1efd1dd2255582fb3ed0b707ff66661e70a7b2b985764c6d5d
-
SHA512
ee5f399110725ecae60615a9a403cd685ba1ff7c8a17c6a879639ca433ef25759f0143fdde6802d7b1ed0afb0702fe35d3afb95839caad64ad5a9ffcc7c60f8b
-
SSDEEP
12288:vO7//4UNc1SKBuMKijwmjBAvQtTnLyEkboOoH7yI3UQehF:I/wUNcAmtwmjmiDwboOoUQSF
Score8/10-
Downloads MZ/PE file
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
-
-
Target
Precision Free Temp/Precision Free Temp.exe
-
Size
1.2MB
-
MD5
1e536b34196826a507bf8f3d89508923
-
SHA1
2d7db3b661bacc16b013287b2e0f3818b8fa1347
-
SHA256
5895a48062634acd6495284454a32f7e1ee940f30f507fd0deef4c6783833e79
-
SHA512
00343ebe05da0dafddcaf698d1522b7574d6ae272ea37078bb1f2b3f0c87b1cbaccd181d4ce4465533c353fddc2405fd8a0f94d9ac3665a4a69eb899802ac03f
-
SSDEEP
24576:DxowEp6y4nKAiJWRFYncBmP9aagTlbDPmUIgi7y:DegRnKAgW77gapln5f
Score1/10 -
-
-
Target
Precision Free Temp/imgui.ini
-
Size
103B
-
MD5
1d213d2e7cbd8a7d6f67061d992f3662
-
SHA1
0c9227fc90ed4122a480700e73cb5644ced35e09
-
SHA256
a07b5fd4b4207c3bff859ad80a957496f5005f52dc787817222bad12cb54c5a0
-
SHA512
a24e7076f26d0ab71f3eb368118b1c63cd7198c2c3324f3f10a868343ba8a8e2395634363b1ff8e53d7f4d0f2236041e7cb7e7eb98acefb896628ba29f94c70d
Score1/10 -
-
-
Target
Precision Free Temp/tut.txt
-
Size
344B
-
MD5
12b33edc840b3fa20aa5abad940fe21c
-
SHA1
634b6ae08c61bc380b7b80faef787bd00651f16a
-
SHA256
c116841eb879be5984a35ecf0cbdc489f003e55529bf7050b9a519cf43e0cd7a
-
SHA512
bd72537820b0fc1888f0083af857834cad28a54a71f96ed909bed0d272fb3b1440723a8a3fcd214f354cc33485c96bd335834c0aca58debdae6bb8c9f4a528b8
Score1/10 -
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1