Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b76a616ed9cf00389762b18798660574
-
Size
945KB
-
Sample
240306-ptasgsca62
-
MD5
b76a616ed9cf00389762b18798660574
-
SHA1
22f98626bfaf427513f6dc9fc500637baec64544
-
SHA256
2a514adb2304c99dc83541c167b3a3af3dc0f0e9615ed6c0726634f6bcd8280a
-
SHA512
6f4b43d62838f01e528afc7a054e406a464fc157da00b47f3466af9d76fa21c4fb861dbece14c544c7c888ced3505e16f0f0408e3954fdd1b344bc76e2cc83ab
-
SSDEEP
24576:l+r0o5VtMwpcxlst4C62X+EFKb51XbTk:lg0t4t4j2uiKbPnk
Behavioral task
behavioral1
Sample
b76a616ed9cf00389762b18798660574.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b76a616ed9cf00389762b18798660574.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
b76a616ed9cf00389762b18798660574
-
Size
945KB
-
MD5
b76a616ed9cf00389762b18798660574
-
SHA1
22f98626bfaf427513f6dc9fc500637baec64544
-
SHA256
2a514adb2304c99dc83541c167b3a3af3dc0f0e9615ed6c0726634f6bcd8280a
-
SHA512
6f4b43d62838f01e528afc7a054e406a464fc157da00b47f3466af9d76fa21c4fb861dbece14c544c7c888ced3505e16f0f0408e3954fdd1b344bc76e2cc83ab
-
SSDEEP
24576:l+r0o5VtMwpcxlst4C62X+EFKb51XbTk:lg0t4t4j2uiKbPnk
Score8/10-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Pre-OS Boot
1Bootkit
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2