Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bd87756e621bd65c9a22700979ed276b
-
Size
32KB
-
Sample
240310-dtfg7abe6z
-
MD5
bd87756e621bd65c9a22700979ed276b
-
SHA1
1577b6a5f1c61bd5e7e6caf79e1d678508785f16
-
SHA256
e92b44743b2c5d16b640d5480fd6395814b488671e429813251d18ea2e149073
-
SHA512
27b36e0fa07169208395882d2754edf01566852a11bbde1197b09f54f5f659e2a71796cdfd65a5b1bb4ac34767f358f7f3f873f32e1e8ecceb0ad3e58182d22c
-
SSDEEP
768:cxvrR16lyByqFNHg0xpjzUCOwydxVRpsRjGBYPVz3j:eDR1Jyq3LjgTvpsRyBG3
Static task
static1
Behavioral task
behavioral1
Sample
bd87756e621bd65c9a22700979ed276b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd87756e621bd65c9a22700979ed276b.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
bd87756e621bd65c9a22700979ed276b
-
Size
32KB
-
MD5
bd87756e621bd65c9a22700979ed276b
-
SHA1
1577b6a5f1c61bd5e7e6caf79e1d678508785f16
-
SHA256
e92b44743b2c5d16b640d5480fd6395814b488671e429813251d18ea2e149073
-
SHA512
27b36e0fa07169208395882d2754edf01566852a11bbde1197b09f54f5f659e2a71796cdfd65a5b1bb4ac34767f358f7f3f873f32e1e8ecceb0ad3e58182d22c
-
SSDEEP
768:cxvrR16lyByqFNHg0xpjzUCOwydxVRpsRjGBYPVz3j:eDR1Jyq3LjgTvpsRyBG3
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-