Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    kaspersky4win202121.16.6.467en_39970.exe

  • Size

    4.2MB

  • Sample

    240504-teaw6add72

  • MD5

    88a9e8f8edfd369e7a45d35ecbd788ab

  • SHA1

    6c58421606592ea59418b9f79983d018c19bda06

  • SHA256

    182699e264a70636924b994cebad5b06ccdcd96480be3a6b970816f3adba4f45

  • SHA512

    6892707be382751b466d43227172b8da913f531e4f257527e7b50e87bf1226a8c6730f9eaa9c617549440049695fdbc317e3d39b4d325382c8e4e0ee540bf2ab

  • SSDEEP

    98304:qO/RG6LkIN84klIci68xnTznF2uHozbMUoTV7G0dj1AmKs3/B:hL24kDi6eTznqbMUoTxGy5t/B

Malware Config

Targets

    • Target

      kaspersky4win202121.16.6.467en_39970.exe

    • Size

      4.2MB

    • MD5

      88a9e8f8edfd369e7a45d35ecbd788ab

    • SHA1

      6c58421606592ea59418b9f79983d018c19bda06

    • SHA256

      182699e264a70636924b994cebad5b06ccdcd96480be3a6b970816f3adba4f45

    • SHA512

      6892707be382751b466d43227172b8da913f531e4f257527e7b50e87bf1226a8c6730f9eaa9c617549440049695fdbc317e3d39b4d325382c8e4e0ee540bf2ab

    • SSDEEP

      98304:qO/RG6LkIN84klIci68xnTznF2uHozbMUoTV7G0dj1AmKs3/B:hL24kDi6eTznqbMUoTxGy5t/B

    • Checks for any installed AV software in registry

    • Checks whether UAC is enabled

    • Downloads MZ/PE file

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks