Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
0s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 09:06
Static task
static1
Behavioral task
behavioral1
Sample
13d735a9a2e5288112a97b283ff81f5d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
13d735a9a2e5288112a97b283ff81f5d.exe
Resource
win10v2004-20231215-en
General
-
Target
13d735a9a2e5288112a97b283ff81f5d.exe
-
Size
823KB
-
MD5
13d735a9a2e5288112a97b283ff81f5d
-
SHA1
4a6c7d79c239584945f64e7004ebff35ea5e1ae4
-
SHA256
f0c46967b991bef4b0d4d5a32db125ec51c8442ad72f5641f401725480d8b316
-
SHA512
3b4b9febf566a123860245e97561d2020083fd0ed3557c991250f065180c33a78cbac1e6a581b186e8c592846d26871d3ef31f0cfbefebb5f5ab8a0e985d49d8
-
SSDEEP
24576:9VTMu+r0ovhZsqQv5XabyGO+8h6ey0OsFZjoKJGB:9V4K+T7Qv5qu/F/y09Zc
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 13d735a9a2e5288112a97b283ff81f5d.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).