Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

VirusShare...4a.exe

windows7-x64

VirusShare...4a.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VirusShare_368c01b181eda42d717feeff4291bb4a

  • Size

    45KB

  • Sample

    240204-qbtnbaaca4

  • MD5

    368c01b181eda42d717feeff4291bb4a

  • SHA1

    d6a6df6a094b9d76a16c1c9d5ce16b9124ee50b1

  • SHA256

    1a123a6b7cd4740e829d2e5178c718549d7d17bc7bb348e60fa7be6e1c683d72

  • SHA512

    8c45f2bd544224de18c46e3ff90b6f75eca41d66be1636a3845e259df9618c33bab2120ee6f866edc4a490039729920c9708e5f600594e1b3a1ebacb17b904d3

  • SSDEEP

    768:it4VZ1p/ija+1ImUqJsbEYY2Ixs4RhYuX5tOH2AFOmDDRLoJQ7zqAU6FbMPwl:Y4VZPqibA26sMK2GncKmA5

Score
10/10
bootkitpersistenceransomware

Malware Config

Targets

    • Target

      VirusShare_368c01b181eda42d717feeff4291bb4a

    • Size

      45KB

    • MD5

      368c01b181eda42d717feeff4291bb4a

    • SHA1

      d6a6df6a094b9d76a16c1c9d5ce16b9124ee50b1

    • SHA256

      1a123a6b7cd4740e829d2e5178c718549d7d17bc7bb348e60fa7be6e1c683d72

    • SHA512

      8c45f2bd544224de18c46e3ff90b6f75eca41d66be1636a3845e259df9618c33bab2120ee6f866edc4a490039729920c9708e5f600594e1b3a1ebacb17b904d3

    • SSDEEP

      768:it4VZ1p/ija+1ImUqJsbEYY2Ixs4RhYuX5tOH2AFOmDDRLoJQ7zqAU6FbMPwl:Y4VZPqibA26sMK2GncKmA5

    Score
    9/10
    bootkitpersistenceransomware

    • Detects ransomware indicator

    • Renames multiple (95) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks