Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqazlnR3pSYV9SdzdKVVhnM18tdU5xcjRnWllrQXxBQ3Jtc0ttV3FxTkZHaElyYlVMQUIyTXZvREU2Q05JODd6Y2RVczVtU2h3eGtxNVpiZHBOazJNNm5mQjlmcWhmaXlVcm5jQW9OWGwwVjF3TE8wTnlPNEVyT3VBNzgzcTNXeFlSTVpfVXhQQWUwQW4td2ZESWE3VQ&q=https%3A%2F%2Fgithub.com%2Fmalwarepad%2Fmalware-repo%2Fraw%2Fmaster%2Frogueavs%2FMonoxide.zip&v=ZlMGZNnGIHk
-
Sample
240222-p5h81ahe9s
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqazlnR3pSYV9SdzdKVVhnM18tdU5xcjRnWllrQXxBQ3Jtc0ttV3FxTkZHaElyYlVMQUIyTXZvREU2Q05JODd6Y2RVczVtU2h3eGtxNVpiZHBOazJNNm5mQjlmcWhmaXlVcm5jQW9OWGwwVjF3TE8wTnlPNEVyT3VBNzgzcTNXeFlSTVpfVXhQQWUwQW4td2ZESWE3VQ&q=https%3A%2F%2Fgithub.com%2Fmalwarepad%2Fmalware-repo%2Fraw%2Fmaster%2Frogueavs%2FMonoxide.zip&v=ZlMGZNnGIHk
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqazlnR3pSYV9SdzdKVVhnM18tdU5xcjRnWllrQXxBQ3Jtc0ttV3FxTkZHaElyYlVMQUIyTXZvREU2Q05JODd6Y2RVczVtU2h3eGtxNVpiZHBOazJNNm5mQjlmcWhmaXlVcm5jQW9OWGwwVjF3TE8wTnlPNEVyT3VBNzgzcTNXeFlSTVpfVXhQQWUwQW4td2ZESWE3VQ&q=https%3A%2F%2Fgithub.com%2Fmalwarepad%2Fmalware-repo%2Fraw%2Fmaster%2Frogueavs%2FMonoxide.zip&v=ZlMGZNnGIHk
Score7/10-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-