Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3ffe93b3e4e29c40624e1728bd76492f67473658918f9bead146ddcb74e91725
-
Size
3.8MB
-
Sample
240209-ycx15adh7x
-
MD5
159615f3ff71ef0c745416d20adb517e
-
SHA1
eb212ff3f3262b5ac43a522a8e291727d8835229
-
SHA256
3ffe93b3e4e29c40624e1728bd76492f67473658918f9bead146ddcb74e91725
-
SHA512
7c95eb834761ff403f5a8842f295e61e2cbffcd2a76a6912d44b09f53d4829f00849fc5663e3c95b5c295cb1e547bb00055955b44026ab1fc8424405a5b8807f
-
SSDEEP
98304:SEjlmQbfgSgwvSnN4iVJu+0xGZ6twFquI3rFqg:SEjgQPXqdEtwYf3rFqg
Behavioral task
behavioral1
Sample
3ffe93b3e4e29c40624e1728bd76492f67473658918f9bead146ddcb74e91725.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ffe93b3e4e29c40624e1728bd76492f67473658918f9bead146ddcb74e91725.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
gozi
Targets
-
-
Target
3ffe93b3e4e29c40624e1728bd76492f67473658918f9bead146ddcb74e91725
-
Size
3.8MB
-
MD5
159615f3ff71ef0c745416d20adb517e
-
SHA1
eb212ff3f3262b5ac43a522a8e291727d8835229
-
SHA256
3ffe93b3e4e29c40624e1728bd76492f67473658918f9bead146ddcb74e91725
-
SHA512
7c95eb834761ff403f5a8842f295e61e2cbffcd2a76a6912d44b09f53d4829f00849fc5663e3c95b5c295cb1e547bb00055955b44026ab1fc8424405a5b8807f
-
SSDEEP
98304:SEjlmQbfgSgwvSnN4iVJu+0xGZ6twFquI3rFqg:SEjgQPXqdEtwYf3rFqg
Score7/10-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-