Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
BOOTVID.dll
windows7-x64
1BOOTVID.dll
windows10-2004-x64
3BootMenuUX.dll
windows7-x64
1BootMenuUX.dll
windows10-2004-x64
3BootRec.exe
windows7-x64
BootRec.exe
windows10-2004-x64
1BroadcastE...ge.exe
windows7-x64
1BroadcastE...ge.exe
windows10-2004-x64
1BrokerLib.dll
windows7-x64
1BrokerLib.dll
windows10-2004-x64
1bootsect.exe
windows7-x64
1bootsect.exe
windows10-2004-x64
1bootstr.dll
windows7-x64
1bootstr.dll
windows10-2004-x64
1bootux.dll
windows7-x64
1bootux.dll
windows10-2004-x64
3Analysis
-
max time kernel
145s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
14/09/2022, 09:02
Static task
static1
Behavioral task
behavioral1
Sample
BOOTVID.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
BOOTVID.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
BootMenuUX.dll
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
BootMenuUX.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
BootRec.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
BootRec.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
BroadcastEnvChange.exe
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
BroadcastEnvChange.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
BrokerLib.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
BrokerLib.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
bootsect.exe
Resource
win7-20220901-en
Behavioral task
behavioral12
Sample
bootsect.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
bootstr.dll
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
bootstr.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral15
Sample
bootux.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
bootux.dll
Resource
win10v2004-20220812-en
General
-
Target
BootMenuUX.dll
-
Size
642KB
-
MD5
5a17e270fe9efcb431067767317a3e47
-
SHA1
de90385622d4bd2da42c4e938466c733509e59e5
-
SHA256
09430f6fff7649063f14f32de7af0fe9167c974f6f5e2864ab2b8417e5d1691b
-
SHA512
20daa2a7841e1f35617e360f7c8826c2608d993eb1d9783827ebfdec09862738ac047bfe4475150fd95d5ef60cbf63984c07248ad9b0a6e2c380da83ac217dfa
-
SSDEEP
12288:Ksa82mtMU4V2ru53J/emTJ6KXTJM6g6iWbNOUzEj0DkZsXeDSHx0:/J2myU4ku5Z/pWuPNOUzE4OlDm
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4816 824 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\BootMenuUX.dll,#11⤵PID:824
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 824 -s 5242⤵
- Program crash
PID:4816
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 456 -p 824 -ip 8241⤵PID:1296