Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
685472de17cb79bf222d897ed16ac979b92798ed5411ace7de7fd148076f87ee
-
Size
600KB
-
Sample
221021-bn3dnaeed5
-
MD5
76c103f09a730f5f981e56298ac15c20
-
SHA1
7c552b010f36fcbebb1abea43ebbc7d1c0ea2168
-
SHA256
685472de17cb79bf222d897ed16ac979b92798ed5411ace7de7fd148076f87ee
-
SHA512
590b7f01ebc322750897062614c584a783d41c6133083130392abc5da08119b0f04403a0010c3964f9034405eaaf2275936d8354459a12cae04ea60da9ab0a4a
-
SSDEEP
12288:u2NO/qp9MmeLwKuTp/Uuz8191zKsCPzlFWgNEOsqQkClpobA:u3qp93Cop/Uuq91jcSDxq+Sc
Static task
static1
Behavioral task
behavioral1
Sample
685472de17cb79bf222d897ed16ac979b92798ed5411ace7de7fd148076f87ee.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
685472de17cb79bf222d897ed16ac979b92798ed5411ace7de7fd148076f87ee.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
685472de17cb79bf222d897ed16ac979b92798ed5411ace7de7fd148076f87ee
-
Size
600KB
-
MD5
76c103f09a730f5f981e56298ac15c20
-
SHA1
7c552b010f36fcbebb1abea43ebbc7d1c0ea2168
-
SHA256
685472de17cb79bf222d897ed16ac979b92798ed5411ace7de7fd148076f87ee
-
SHA512
590b7f01ebc322750897062614c584a783d41c6133083130392abc5da08119b0f04403a0010c3964f9034405eaaf2275936d8354459a12cae04ea60da9ab0a4a
-
SSDEEP
12288:u2NO/qp9MmeLwKuTp/Uuz8191zKsCPzlFWgNEOsqQkClpobA:u3qp93Cop/Uuq91jcSDxq+Sc
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-