Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

362bebf2dd...90.exe

windows7-x64

9

362bebf2dd...90.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    362bebf2dd4a8eed72b424e60925b84c3c031111e00a596b325102b56e329290

  • Size

    5.3MB

  • Sample

    231008-pt7gfsed57

  • MD5

    cbdc1728ec5ba5cb9eb1a0dfbcac326d

  • SHA1

    cdfb3f71636b276224d61c918fc26f092af620b8

  • SHA256

    362bebf2dd4a8eed72b424e60925b84c3c031111e00a596b325102b56e329290

  • SHA512

    5908bcf5e3d5e17e0ec14c7d77ffe8095b087729e9716cda9e4af36206661fa2a3013cd7c80c74e56101256659f3d9eaf4770eb8110e4a0fc6e9cae2582cf900

  • SSDEEP

    98304:BNV6NatCnwNsiB32bSiiIbzVhYGIfJygff226jPVi7ESfIbIa33mMH9:oaOrdVhYXfsgff226PV4i3

Score
9/10
bootkitevasionpersistencetrojan

Malware Config

Targets

    • Target

      362bebf2dd4a8eed72b424e60925b84c3c031111e00a596b325102b56e329290

    • Size

      5.3MB

    • MD5

      cbdc1728ec5ba5cb9eb1a0dfbcac326d

    • SHA1

      cdfb3f71636b276224d61c918fc26f092af620b8

    • SHA256

      362bebf2dd4a8eed72b424e60925b84c3c031111e00a596b325102b56e329290

    • SHA512

      5908bcf5e3d5e17e0ec14c7d77ffe8095b087729e9716cda9e4af36206661fa2a3013cd7c80c74e56101256659f3d9eaf4770eb8110e4a0fc6e9cae2582cf900

    • SSDEEP

      98304:BNV6NatCnwNsiB32bSiiIbzVhYGIfJygff226jPVi7ESfIbIa33mMH9:oaOrdVhYXfsgff226PV4i3

    Score
    9/10
    bootkitevasionpersistencetrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks whether UAC is enabled

      evasiontrojan

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks