Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b80f54d2ada9a2e1a4c917d96dc3ef84e53318489e96512fc256f9902a4fbfc4

  • Size

    3.4MB

  • Sample

    240206-1gb1kaagam

  • MD5

    1bbe42ee8951863716a448c60857b057

  • SHA1

    855f31bc0098b6f2d647c197ba15c025144e9d70

  • SHA256

    b80f54d2ada9a2e1a4c917d96dc3ef84e53318489e96512fc256f9902a4fbfc4

  • SHA512

    fb64d66ddc1b2c85e03dc032578abe9bda661bfd7974bb3c6e2851916f0d1b90d326e4a2b413c59dff18148897fdee04c698c060e25eed397ac13b50df9d0d56

  • SSDEEP

    49152:qEjEamQb2OguN8Dfk5JEG14wv2QwnN4iTapOcaPKfjtD8cEOxeuxzS2hPV5T1gWY:qEjlmQbfgSgwvSnN4iVJuS0xJdzYUq5

Malware Config

Extracted

Family

gozi

Targets

    • Target

      b80f54d2ada9a2e1a4c917d96dc3ef84e53318489e96512fc256f9902a4fbfc4

    • Size

      3.4MB

    • MD5

      1bbe42ee8951863716a448c60857b057

    • SHA1

      855f31bc0098b6f2d647c197ba15c025144e9d70

    • SHA256

      b80f54d2ada9a2e1a4c917d96dc3ef84e53318489e96512fc256f9902a4fbfc4

    • SHA512

      fb64d66ddc1b2c85e03dc032578abe9bda661bfd7974bb3c6e2851916f0d1b90d326e4a2b413c59dff18148897fdee04c698c060e25eed397ac13b50df9d0d56

    • SSDEEP

      49152:qEjEamQb2OguN8Dfk5JEG14wv2QwnN4iTapOcaPKfjtD8cEOxeuxzS2hPV5T1gWY:qEjlmQbfgSgwvSnN4iVJuS0xJdzYUq5

    Score
    7/10
    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks