Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    spacedesk_driver_Win_10_64_v2122.msi

  • Size

    4.7MB

  • Sample

    240921-med59axclh

  • MD5

    65f5f179e3da0dbfbd6b35cda7af3e0a

  • SHA1

    2569f9f147e989d5e0a766b80e18a64f44b531f7

  • SHA256

    049cad32f63e51a5c7755fe00d6cda2dc70bee89640d821ff3760cc42bad2499

  • SHA512

    810e97256811b409dffd063d91dc2d10ae7573ea2b76d6b1854f522b8bb5ba812f1b8a8a35d219f4e56c0e8e94a0724f577b9e5e474b5de382a401a1d590225b

  • SSDEEP

    98304:Jm0qsQ5enKbkLRkKGv6ySKD6GjwLNIUbG:IjxAKbkAvWujwBb

Malware Config

Targets

    • Target

      spacedesk_driver_Win_10_64_v2122.msi

    • Size

      4.7MB

    • MD5

      65f5f179e3da0dbfbd6b35cda7af3e0a

    • SHA1

      2569f9f147e989d5e0a766b80e18a64f44b531f7

    • SHA256

      049cad32f63e51a5c7755fe00d6cda2dc70bee89640d821ff3760cc42bad2499

    • SHA512

      810e97256811b409dffd063d91dc2d10ae7573ea2b76d6b1854f522b8bb5ba812f1b8a8a35d219f4e56c0e8e94a0724f577b9e5e474b5de382a401a1d590225b

    • SSDEEP

      98304:Jm0qsQ5enKbkLRkKGv6ySKD6GjwLNIUbG:IjxAKbkAvWujwBb

    • Drops file in Drivers directory

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks