Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    dff0d2f66e14a867f7c97652e86dd5bc02f72b2171db5fd819b768f276127fa5

  • Size

    444KB

  • Sample

    221206-vyzv3agh46

  • MD5

    d7084520b7f22772ecc0f67883cffe45

  • SHA1

    52a5c68cda267ace9951431e5b85ef6e2a7e5574

  • SHA256

    dff0d2f66e14a867f7c97652e86dd5bc02f72b2171db5fd819b768f276127fa5

  • SHA512

    a4c209870a11dd3312928765dbfc683587632ca2062f7b58fcb651ba4013d72f38f0c15cb924bb15fef7a3e22fc97769ec2ccd9ca0d25373cc670c9e47608b19

  • SSDEEP

    12288:lu1mcjCfQ/Rz/xbTj7poqeLjz9+f8ldbyd8bN20rvtsRgc:81mbfgV/xPj7poqeLX98obyd8bc07twr

Malware Config

Targets

    • Target

      dff0d2f66e14a867f7c97652e86dd5bc02f72b2171db5fd819b768f276127fa5

    • Size

      444KB

    • MD5

      d7084520b7f22772ecc0f67883cffe45

    • SHA1

      52a5c68cda267ace9951431e5b85ef6e2a7e5574

    • SHA256

      dff0d2f66e14a867f7c97652e86dd5bc02f72b2171db5fd819b768f276127fa5

    • SHA512

      a4c209870a11dd3312928765dbfc683587632ca2062f7b58fcb651ba4013d72f38f0c15cb924bb15fef7a3e22fc97769ec2ccd9ca0d25373cc670c9e47608b19

    • SSDEEP

      12288:lu1mcjCfQ/Rz/xbTj7poqeLjz9+f8ldbyd8bN20rvtsRgc:81mbfgV/xPj7poqeLX98obyd8bc07twr

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks