Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    02fa2a13bf1ecf36aeb11bf52c0c3213

  • Size

    328KB

  • Sample

    231225-dy98csbcc3

  • MD5

    02fa2a13bf1ecf36aeb11bf52c0c3213

  • SHA1

    a7767257d1bb824c9f6cd98b687c9020bd0f5da1

  • SHA256

    1e320f27ebefd5151d75185d7e5f3ffb7a1de931483fc07a20ecbfa8c8696b77

  • SHA512

    b8d52de253778f42327fa9dd1bc57e932a8327eb87db4375e444341f840079890cdf8c56bb1cde09b850574edbc3333f35ca5080ea832de65b3f95e1b22638c7

  • SSDEEP

    6144:YePJYhcvhLxotp++sCTHUIKz3JWGYBjWo8RC9s+TrVXkOpR2AW/6F02:YePJYIh9of++skOYBjDg2pUOpAA02

Malware Config

Targets

    • Target

      02fa2a13bf1ecf36aeb11bf52c0c3213

    • Size

      328KB

    • MD5

      02fa2a13bf1ecf36aeb11bf52c0c3213

    • SHA1

      a7767257d1bb824c9f6cd98b687c9020bd0f5da1

    • SHA256

      1e320f27ebefd5151d75185d7e5f3ffb7a1de931483fc07a20ecbfa8c8696b77

    • SHA512

      b8d52de253778f42327fa9dd1bc57e932a8327eb87db4375e444341f840079890cdf8c56bb1cde09b850574edbc3333f35ca5080ea832de65b3f95e1b22638c7

    • SSDEEP

      6144:YePJYhcvhLxotp++sCTHUIKz3JWGYBjWo8RC9s+TrVXkOpR2AW/6F02:YePJYIh9of++skOYBjDg2pUOpAA02

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks