Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

91a21670aa...df.dll

windows7-x64

8

91a21670aa...df.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    91a21670aa845299ddd440c60fb0fde8eac30a0cb426cff86eea71e8a642e2df

  • Size

    240KB

  • Sample

    231124-aczmysde39

  • MD5

    d7bd27ad00803b9c5632125f7bcf81e9

  • SHA1

    b386eec1e2a621182b4ae2076590121a02416a21

  • SHA256

    91a21670aa845299ddd440c60fb0fde8eac30a0cb426cff86eea71e8a642e2df

  • SHA512

    29170da1c0016af07a24c4d51586ba893188315c7e4257d23e7e0462c9f910f6698e057f3774f69300ca0152f1ca18cc073768cb38d2e33c0fbded326740092f

  • SSDEEP

    6144:65r3lV6n42+3WSKhxD8RVo2rcaGKNqAwyotp2R:6C+3xWDY9IpKNTwyo2

Score
8/10
bootkitpersistencespywarestealer

Malware Config

Targets

    • Target

      91a21670aa845299ddd440c60fb0fde8eac30a0cb426cff86eea71e8a642e2df

    • Size

      240KB

    • MD5

      d7bd27ad00803b9c5632125f7bcf81e9

    • SHA1

      b386eec1e2a621182b4ae2076590121a02416a21

    • SHA256

      91a21670aa845299ddd440c60fb0fde8eac30a0cb426cff86eea71e8a642e2df

    • SHA512

      29170da1c0016af07a24c4d51586ba893188315c7e4257d23e7e0462c9f910f6698e057f3774f69300ca0152f1ca18cc073768cb38d2e33c0fbded326740092f

    • SSDEEP

      6144:65r3lV6n42+3WSKhxD8RVo2rcaGKNqAwyotp2R:6C+3xWDY9IpKNTwyo2

    Score
    8/10
    bootkitpersistencespywarestealer

    • Blocklisted process makes network request

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks