Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ab77e26bef6bd0c4cde6801d58d70d63
-
Size
84KB
-
Sample
240228-kkmngafe74
-
MD5
ab77e26bef6bd0c4cde6801d58d70d63
-
SHA1
c6eb9be4cd848b320a8d879a62057dce5f553615
-
SHA256
7e1a9f9914a0e3b474162eb0f7da6ee48b8f944c5bb75148de011cf5fb2fec3c
-
SHA512
27b4fdb91bbda83cf389413e77fadccbcce62aa85fbdea693fca9c9424302c1d638854da65236ef3ec254b859b14187b1c00a7ab61d5de9b0f2d32e3797747bf
-
SSDEEP
1536:PzwgIEvURvgy4AlPrR3Mrg7lfpnzjQBsDpJiYjTCHcbpaq+JkLevo9lhP/BXsRuu:Pz5IEuYy4AlTRcOHcsaYYEpl+JkLAkho
Static task
static1
Behavioral task
behavioral1
Sample
huo.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
huo.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
tj.html
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
tj.html
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
huo.exe
-
Size
85KB
-
MD5
abc1a6cedb451694d573a61be7cb0d33
-
SHA1
a1a1741dcb4a5589ba07bab5931073aeee5275f5
-
SHA256
a35a56366604e755cca7583f94fc0a851b736beb569615d07fb2ff0c81e48986
-
SHA512
41d3d98baeaf4931388b9231a79fbc5f284755a9c75d5d91ad2716b3e78e501dc9668d7fe0e9cfc6fcac5d45f869b2f9e75779e748e8719d21aeaadb95bc3133
-
SSDEEP
1536:xF4mvWAvxyR5UNATpYRGST7/aN0o88FwbWcK4bqTpAj09m:omTxyRPpY4ST7/aNf8PbWcK4buW04
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-
-
-
Target
tj.html
-
Size
68B
-
MD5
dff6286d54ca6f44701471f03d1c9120
-
SHA1
a44d62268554cbab5674530e5302b060341ce34d
-
SHA256
f626ce146465d51434bd550ec131d23576dd67ee8d64f8ae8852ee6aaf879eb9
-
SHA512
aa2531c2bfab12e254462deb6a58bd26185d1c2148a68ef5df34dc8c33ca51aed88f25996bf6b4ce13100723a486ed399522523de66cfae9afeb3b92ffffc69d
Score1/10 -