Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ab77e26bef6bd0c4cde6801d58d70d63

  • Size

    84KB

  • Sample

    240228-kkmngafe74

  • MD5

    ab77e26bef6bd0c4cde6801d58d70d63

  • SHA1

    c6eb9be4cd848b320a8d879a62057dce5f553615

  • SHA256

    7e1a9f9914a0e3b474162eb0f7da6ee48b8f944c5bb75148de011cf5fb2fec3c

  • SHA512

    27b4fdb91bbda83cf389413e77fadccbcce62aa85fbdea693fca9c9424302c1d638854da65236ef3ec254b859b14187b1c00a7ab61d5de9b0f2d32e3797747bf

  • SSDEEP

    1536:PzwgIEvURvgy4AlPrR3Mrg7lfpnzjQBsDpJiYjTCHcbpaq+JkLevo9lhP/BXsRuu:Pz5IEuYy4AlTRcOHcsaYYEpl+JkLAkho

Score
7/10

Malware Config

Targets

    • Target

      huo.exe

    • Size

      85KB

    • MD5

      abc1a6cedb451694d573a61be7cb0d33

    • SHA1

      a1a1741dcb4a5589ba07bab5931073aeee5275f5

    • SHA256

      a35a56366604e755cca7583f94fc0a851b736beb569615d07fb2ff0c81e48986

    • SHA512

      41d3d98baeaf4931388b9231a79fbc5f284755a9c75d5d91ad2716b3e78e501dc9668d7fe0e9cfc6fcac5d45f869b2f9e75779e748e8719d21aeaadb95bc3133

    • SSDEEP

      1536:xF4mvWAvxyR5UNATpYRGST7/aN0o88FwbWcK4bqTpAj09m:omTxyRPpY4ST7/aNf8PbWcK4buW04

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • Drops file in System32 directory

    • Target

      tj.html

    • Size

      68B

    • MD5

      dff6286d54ca6f44701471f03d1c9120

    • SHA1

      a44d62268554cbab5674530e5302b060341ce34d

    • SHA256

      f626ce146465d51434bd550ec131d23576dd67ee8d64f8ae8852ee6aaf879eb9

    • SHA512

      aa2531c2bfab12e254462deb6a58bd26185d1c2148a68ef5df34dc8c33ca51aed88f25996bf6b4ce13100723a486ed399522523de66cfae9afeb3b92ffffc69d

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks