Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
980c6495b5be689bd08ca90360eca8c3_xiaoba_JC.exe
-
Size
716KB
-
Sample
230808-s27c7sfb31
-
MD5
980c6495b5be689bd08ca90360eca8c3
-
SHA1
31bc8d269709b93f3cb3f43494f916fd7c1390e5
-
SHA256
1acdd1c18009ee16bea0c9d64f6b63b1243449531384a4265e1ef9cc66439466
-
SHA512
013b399a86c77012b72419fca54f78a51556f84bba3589a2f6e5ad73746732b2e4570ba0c0209688df173830e85b57d2a0851ac535aa07b68dbf47cfeda1fa2c
-
SSDEEP
12288:BaPVmPWz9Ms99bJ9RQ8gzl8c1osWoZ+v6b+w:Bfuzis9hxolDasWoZxb+w
Static task
static1
Behavioral task
behavioral1
Sample
980c6495b5be689bd08ca90360eca8c3_xiaoba_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
980c6495b5be689bd08ca90360eca8c3_xiaoba_JC.exe
Resource
win10v2004-20230703-en
Malware Config
Targets
-
-
Target
980c6495b5be689bd08ca90360eca8c3_xiaoba_JC.exe
-
Size
716KB
-
MD5
980c6495b5be689bd08ca90360eca8c3
-
SHA1
31bc8d269709b93f3cb3f43494f916fd7c1390e5
-
SHA256
1acdd1c18009ee16bea0c9d64f6b63b1243449531384a4265e1ef9cc66439466
-
SHA512
013b399a86c77012b72419fca54f78a51556f84bba3589a2f6e5ad73746732b2e4570ba0c0209688df173830e85b57d2a0851ac535aa07b68dbf47cfeda1fa2c
-
SSDEEP
12288:BaPVmPWz9Ms99bJ9RQ8gzl8c1osWoZ+v6b+w:Bfuzis9hxolDasWoZxb+w
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-