Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4d9558af1bdc4c5aab234f1fccc0114106d9e27289bf5e02c952ca34481c7b13
-
Size
3.4MB
-
Sample
240206-1j1fyaghe7
-
MD5
0aec71babe7f1518573cd8c3282a267b
-
SHA1
cb8ecd0df175a790eb6ec8e911a54f9a12288b3d
-
SHA256
4d9558af1bdc4c5aab234f1fccc0114106d9e27289bf5e02c952ca34481c7b13
-
SHA512
29b59a2adb4f903a9175e85a1997e12dba49793b6b0ce31ca02b59cc5dcf17e5e4f544d739721c1a6b0b1c52ab41185cd58c73d2b5fb43846879fe58f1ade69b
-
SSDEEP
49152:rEjEamQb2OguN8Dfk5JEG14wv2QwnN4iTapOcaPKfjtD8cEOxeuxzS2hPV5T1gWw:rEjlmQbfgSgwvSnN4iVJuS0xJdzYUql
Behavioral task
behavioral1
Sample
4d9558af1bdc4c5aab234f1fccc0114106d9e27289bf5e02c952ca34481c7b13.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4d9558af1bdc4c5aab234f1fccc0114106d9e27289bf5e02c952ca34481c7b13.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
gozi
Targets
-
-
Target
4d9558af1bdc4c5aab234f1fccc0114106d9e27289bf5e02c952ca34481c7b13
-
Size
3.4MB
-
MD5
0aec71babe7f1518573cd8c3282a267b
-
SHA1
cb8ecd0df175a790eb6ec8e911a54f9a12288b3d
-
SHA256
4d9558af1bdc4c5aab234f1fccc0114106d9e27289bf5e02c952ca34481c7b13
-
SHA512
29b59a2adb4f903a9175e85a1997e12dba49793b6b0ce31ca02b59cc5dcf17e5e4f544d739721c1a6b0b1c52ab41185cd58c73d2b5fb43846879fe58f1ade69b
-
SSDEEP
49152:rEjEamQb2OguN8Dfk5JEG14wv2QwnN4iTapOcaPKfjtD8cEOxeuxzS2hPV5T1gWw:rEjlmQbfgSgwvSnN4iVJuS0xJdzYUql
Score7/10-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-