Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

vvchmqom.exe

windows10-2004-x64

7

Resubmissions

24/04/2024, 18:44

240424-xdfb2afb7x 7

24/04/2024, 18:17

240424-ww1j9aeg4z 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    vvchmqom.exe

  • Size

    2.4MB

  • Sample

    240424-xdfb2afb7x

  • MD5

    fef437e0d3b39c1d66940200a6ae92f7

  • SHA1

    1a30b28813c5d153aa8335ecf1af0cdee90a2ccb

  • SHA256

    7b6e9e2db641c88e98f324b92a88034a7ca19c3f5d180b7e6882a478fb8fcda8

  • SHA512

    daa7354f2a3b0928645c1c0eed53ea46c41b4004eba11c5c19e73f49711e915ca5eea23169333b8599e6ed10e2d3312272bc647fbd94ccf2d6ae2443c4e19483

  • SSDEEP

    49152:X640cBt1N6IQjfYuSP6bn5lvr8tsc4ABskrucI6fqc9kxoR4Holu:XD/t1N7uUg5lz8tsnA/iPJcqfolu

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      vvchmqom.exe

    • Size

      2.4MB

    • MD5

      fef437e0d3b39c1d66940200a6ae92f7

    • SHA1

      1a30b28813c5d153aa8335ecf1af0cdee90a2ccb

    • SHA256

      7b6e9e2db641c88e98f324b92a88034a7ca19c3f5d180b7e6882a478fb8fcda8

    • SHA512

      daa7354f2a3b0928645c1c0eed53ea46c41b4004eba11c5c19e73f49711e915ca5eea23169333b8599e6ed10e2d3312272bc647fbd94ccf2d6ae2443c4e19483

    • SSDEEP

      49152:X640cBt1N6IQjfYuSP6bn5lvr8tsc4ABskrucI6fqc9kxoR4Holu:XD/t1N7uUg5lz8tsnA/iPJcqfolu

    Score
    7/10
    bootkitpersistence

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks