Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d86cd0522385c94d127a8a687fcde9bbfe2f025d061b050458b03a75e908a97a.zip
-
Size
2.6MB
-
Sample
250211-w3tehswpft
-
MD5
94a5520c03241d1f506398b9673d0edc
-
SHA1
3c76caa1beca2f5c48e28d4ee04632624384e7b8
-
SHA256
3dc1b6e80be4f1d55cb81f184e631a494ade7a95abf35df066466867a316f16c
-
SHA512
47239566f73335f851f8cbbc8edd9d67e531805fdeb19046616c2fe4eb55f589e855640af3776e825b31367c937b81f08d9e8d6a495a76f3e8d94fb6b155ab17
-
SSDEEP
49152:xTqxlY1r6UhSeBrBiVvaUMfjPPza14su3cvMWol43CScFgAFOav/XBUQ0:xTDUUhSeVBkaJLPCgcvRol66nRL0
Behavioral task
behavioral1
Sample
d86cd0522385c94d127a8a687fcde9bbfe2f025d061b050458b03a75e908a97a.msi
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
d86cd0522385c94d127a8a687fcde9bbfe2f025d061b050458b03a75e908a97a.msi
Resource
win10v2004-20250207-en
Malware Config
Targets
-
-
Target
d86cd0522385c94d127a8a687fcde9bbfe2f025d061b050458b03a75e908a97a.msi
-
Size
2.9MB
-
MD5
9a70f71e961db28a61f88b5a401cc6b9
-
SHA1
afc84d322954f1c543a24f354885a2a9938a9118
-
SHA256
d86cd0522385c94d127a8a687fcde9bbfe2f025d061b050458b03a75e908a97a
-
SHA512
b9747e78e6b03631093ac57a3bd6a7c8ab1f2ee724589db1fd9e282ef5f3be81e0499652977567f815bcf26d1f3fa3470e7b59890986ced94043b8c0d37da209
-
SSDEEP
49152:++1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:++lUlz9FKbsodq0YaH7ZPxMb8tT
-
Ateraagent family
-
Detects AteraAgent
-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1System Binary Proxy Execution
1Msiexec
1