Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    24d0478bee1c1a00263e8757963fe84ec05c790659ff73fe2c9d005f7e3db058

  • Size

    3.5MB

  • Sample

    240212-zdlj6add77

  • MD5

    e8c1fb2efb69c3daf461b9447b86419f

  • SHA1

    cab5a829601d117715eea1db6f1216353de10f9b

  • SHA256

    24d0478bee1c1a00263e8757963fe84ec05c790659ff73fe2c9d005f7e3db058

  • SHA512

    3afe73baa682b547aff78e88e93ffcac8ea2e953f989b2e49285bb10c64a0b4bef5643c1332d5d0b063a73033baa1f820dc79b88253c0f0c02eba5a3e404d9e0

  • SSDEEP

    49152:ZhE/hGyc92Q4sGFilFT4IZi3O96wrhHHfT81CEhx+XOtWEbV/q5WVp4QHhmeZP5y:ZhIhGOQw+Sgi32HHfImWQQrvrOoUq8

Malware Config

Extracted

Family

gozi

Targets

    • Target

      24d0478bee1c1a00263e8757963fe84ec05c790659ff73fe2c9d005f7e3db058

    • Size

      3.5MB

    • MD5

      e8c1fb2efb69c3daf461b9447b86419f

    • SHA1

      cab5a829601d117715eea1db6f1216353de10f9b

    • SHA256

      24d0478bee1c1a00263e8757963fe84ec05c790659ff73fe2c9d005f7e3db058

    • SHA512

      3afe73baa682b547aff78e88e93ffcac8ea2e953f989b2e49285bb10c64a0b4bef5643c1332d5d0b063a73033baa1f820dc79b88253c0f0c02eba5a3e404d9e0

    • SSDEEP

      49152:ZhE/hGyc92Q4sGFilFT4IZi3O96wrhHHfT81CEhx+XOtWEbV/q5WVp4QHhmeZP5y:ZhIhGOQw+Sgi32HHfImWQQrvrOoUq8

    Score
    7/10
    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks