Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

1

MSI APP Player.exe

windows11-21h2-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MSI APP Player.exe

  • Size

    1.1MB

  • Sample

    241005-cegk9sygkk

  • MD5

    98341684249edae864b1ed61c1b0fd7c

  • SHA1

    788c46a8814f5f39e56aa408711179bab5be398f

  • SHA256

    ab28a0f279d19c9c0c507a677b74616971f3e443277f0709bb619feffe40daf7

  • SHA512

    1c7695754dfa5ebe0a06023ba4795571e68cd02ffa30c2648633aec468dc4aacef59b281e10fe86401d0eeca4d36f64a3e32cdb697afa6e780c6ddb8eb588f58

  • SSDEEP

    24576:HivtCX8jrlikZ3NzhXV0Oy5zCsP2/KzFazfA4hUlIiKPQk/sy:CtCX8nl9XxV07zCukz4BwUy

Score
6/10
discoveryevasionpersistenceprivilege_escalationspywarestealer

Malware Config

Targets

    • Target

      MSI APP Player.exe

    • Size

      1.1MB

    • MD5

      98341684249edae864b1ed61c1b0fd7c

    • SHA1

      788c46a8814f5f39e56aa408711179bab5be398f

    • SHA256

      ab28a0f279d19c9c0c507a677b74616971f3e443277f0709bb619feffe40daf7

    • SHA512

      1c7695754dfa5ebe0a06023ba4795571e68cd02ffa30c2648633aec468dc4aacef59b281e10fe86401d0eeca4d36f64a3e32cdb697afa6e780c6ddb8eb588f58

    • SSDEEP

      24576:HivtCX8jrlikZ3NzhXV0Oy5zCsP2/KzFazfA4hUlIiKPQk/sy:CtCX8nl9XxV07zCukz4BwUy

    Score
    6/10
    discoveryevasionpersistenceprivilege_escalationspywarestealer

    • Downloads MZ/PE file

    • Modifies Windows Firewall

      evasion
    behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

1
T1543

Windows Service

1
T1543.003

Event Triggered Execution

1
T1546

Netsh Helper DLL

1
T1546.007

Privilege Escalation

Create or Modify System Process

1
T1543

Windows Service

1
T1543.003

Event Triggered Execution

1
T1546

Netsh Helper DLL

1
T1546.007

Defense Evasion

Impair Defenses

1
T1562

Disable or Modify System Firewall

1
T1562.004

Modify Registry

1
T1112

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Credential Access

Credentials from Password Stores

1
T1555

Credentials from Web Browsers

1
T1555.003

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Data from Local System

1
T1005

Command and Control

Exfiltration

Impact

Tasks