Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    driverguide.exe

  • Size

    4.9MB

  • Sample

    230321-nkrh7saa36

  • MD5

    78c6ff84ae3e02023285e06d6e44ebb1

  • SHA1

    9c0002276fdc2704d9133066b6969d1d52f87e05

  • SHA256

    7c124fff8438a7ec767f8647c2ab7b3c76de513aa7248566432f14ffc3348a22

  • SHA512

    7874283965739be32344f6024000e6680008051c1656d145d6c2158df1e506bd755bfa5fdb9c4b6b6d300f545e975dd405562c4ba2d7acac7a10d1bdfc9cc00d

  • SSDEEP

    98304:yKpS9BZpykFRYXDA5aKOZJ61Pm87BlnxYqoeut0fF/YxFfFXG329GdFwCOt:yKpS9Byk40joEMeBlxit8F+W32Id+L

Score
7/10

Malware Config

Targets

    • Target

      driverguide.exe

    • Size

      4.9MB

    • MD5

      78c6ff84ae3e02023285e06d6e44ebb1

    • SHA1

      9c0002276fdc2704d9133066b6969d1d52f87e05

    • SHA256

      7c124fff8438a7ec767f8647c2ab7b3c76de513aa7248566432f14ffc3348a22

    • SHA512

      7874283965739be32344f6024000e6680008051c1656d145d6c2158df1e506bd755bfa5fdb9c4b6b6d300f545e975dd405562c4ba2d7acac7a10d1bdfc9cc00d

    • SSDEEP

      98304:yKpS9BZpykFRYXDA5aKOZJ61Pm87BlnxYqoeut0fF/YxFfFXG329GdFwCOt:yKpS9Byk40joEMeBlxit8F+W32Id+L

    Score
    7/10
    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks