Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4659e330ffbbdd3fadd0adbcdde222cf

  • Size

    241KB

  • Sample

    240106-qrzt9safb5

  • MD5

    4659e330ffbbdd3fadd0adbcdde222cf

  • SHA1

    b81aa9ee0de7c37ae13e34f6dae73f99e6f889f0

  • SHA256

    19be64189a310edfec1470699b3b70a19ea3196fb5bc786f4ecc77530f8dfc8e

  • SHA512

    e77db493ca650c4d7fddff782a73287fbee5fe49a22689694c6cab48e090db17cb5c5b66518a3e82d7bad47bd92e3ed2a85ab0904081d24ae86101abe7b481ff

  • SSDEEP

    6144:LkeENDvTSn2SV/GuhYdViC7X57+nMnluaBedJsiTvHs:LNEND/k/GLPX57+nKlVccibHs

Malware Config

Targets

    • Target

      4659e330ffbbdd3fadd0adbcdde222cf

    • Size

      241KB

    • MD5

      4659e330ffbbdd3fadd0adbcdde222cf

    • SHA1

      b81aa9ee0de7c37ae13e34f6dae73f99e6f889f0

    • SHA256

      19be64189a310edfec1470699b3b70a19ea3196fb5bc786f4ecc77530f8dfc8e

    • SHA512

      e77db493ca650c4d7fddff782a73287fbee5fe49a22689694c6cab48e090db17cb5c5b66518a3e82d7bad47bd92e3ed2a85ab0904081d24ae86101abe7b481ff

    • SSDEEP

      6144:LkeENDvTSn2SV/GuhYdViC7X57+nMnluaBedJsiTvHs:LNEND/k/GLPX57+nKlVccibHs

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks