Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

OrcamentoP...df.msi

windows7-x64

10

OrcamentoP...df.msi

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    OrcamentoProdutosServicosPdf.msi

  • Size

    2.9MB

  • Sample

    250117-t4h9tswnbt

  • MD5

    f722c03a7b40bf6a9c2883e619765724

  • SHA1

    b12dd1d19678b491c8bc6acba1306258bd9ce7c8

  • SHA256

    675dcb6bba0c941067c4281d0df9b3f6f814586b99461e43bf550dcd6ed316f5

  • SHA512

    ce4816fe8d8530bbc32dfdc8987527081ff2cc4dc49b09c436ece6313111583f4d3f922a076018e7c23e6e1b65ae51c15e3bf7bccc4c7f9b30e3858391d721b2

  • SSDEEP

    49152:e+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:e+lUlz9FKbsodq0YaH7ZPxMb8tT

Score
10/10
ateraagentdiscoverypersistenceprivilege_escalationrat

Malware Config

Targets

    • Target

      OrcamentoProdutosServicosPdf.msi

    • Size

      2.9MB

    • MD5

      f722c03a7b40bf6a9c2883e619765724

    • SHA1

      b12dd1d19678b491c8bc6acba1306258bd9ce7c8

    • SHA256

      675dcb6bba0c941067c4281d0df9b3f6f814586b99461e43bf550dcd6ed316f5

    • SHA512

      ce4816fe8d8530bbc32dfdc8987527081ff2cc4dc49b09c436ece6313111583f4d3f922a076018e7c23e6e1b65ae51c15e3bf7bccc4c7f9b30e3858391d721b2

    • SSDEEP

      49152:e+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:e+lUlz9FKbsodq0YaH7ZPxMb8tT

    Score
    10/10
    ateraagentdiscoverypersistenceprivilege_escalationrat

    • AteraAgent

      AteraAgent is a remote monitoring and management tool.

      ratateraagent

    • Ateraagent family

      ateraagent

    • Detects AteraAgent

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks