Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

LaudoBombeiro.msi

windows7-x64

10

LaudoBombeiro.msi

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    LaudoBombeiro.msi

  • Size

    2.9MB

  • Sample

    250210-wvelds1kbp

  • MD5

    be718005b76304765320e6ecc1cfa44b

  • SHA1

    c23cf852232284dfdf3f988d289c1cd13e4bc5b0

  • SHA256

    c5a9d17efdc7297d5d874e7765073258ffa919829da456101bb6076f5476ac26

  • SHA512

    1355fae59e627f91bb534a7e990e3914650e033eb92b8da79489b185db212a4f9808e019142118bb282ee6ea53fc1d5c9de108b09850d613b45b37f411e0019f

  • SSDEEP

    49152:Z+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:Z+lUlz9FKbsodq0YaH7ZPxMb8tT

Score
10/10
ateraagentdiscoveryexecutionpersistenceprivilege_escalationrat

Malware Config

Targets

    • Target

      LaudoBombeiro.msi

    • Size

      2.9MB

    • MD5

      be718005b76304765320e6ecc1cfa44b

    • SHA1

      c23cf852232284dfdf3f988d289c1cd13e4bc5b0

    • SHA256

      c5a9d17efdc7297d5d874e7765073258ffa919829da456101bb6076f5476ac26

    • SHA512

      1355fae59e627f91bb534a7e990e3914650e033eb92b8da79489b185db212a4f9808e019142118bb282ee6ea53fc1d5c9de108b09850d613b45b37f411e0019f

    • SSDEEP

      49152:Z+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:Z+lUlz9FKbsodq0YaH7ZPxMb8tT

    Score
    10/10
    ateraagentdiscoverypersistenceprivilege_escalationratexecution

    • AteraAgent

      AteraAgent is a remote monitoring and management tool.

      ratateraagent

    • Ateraagent family

      ateraagent

    • Detects AteraAgent

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks