Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

2024-07-01...er.exe

windows7-x64

7

2024-07-01...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-07-01_cc3d4986f32818a6f5569b18eb101efb_magniber

  • Size

    99.3MB

  • Sample

    240701-1j3w3a1flg

  • MD5

    cc3d4986f32818a6f5569b18eb101efb

  • SHA1

    fecddb215022931d02cbf0171f625ee245e6cec3

  • SHA256

    d8a3711619f03de66dbe6c1780cf676af51e6c7e63a477a59f3678650cba9f8d

  • SHA512

    a2ace16807d0ed2386a3c92ce9b1fb52aa437e6d9a3dbe2865099cd4d32120291ef80d3f98fa82c4420aeceb38c7f5aded31f4876b1372db81e525403ecbaffc

  • SSDEEP

    1572864:GrqBYS1BgozTVGlDsA1SVAkRnkrwB/MCQGPSWU1JNeFhQeqQBDV3nsgE+ApQkSq:1YS1S6GlDsAYrt9B086y1qQBp3ILQ6

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      2024-07-01_cc3d4986f32818a6f5569b18eb101efb_magniber

    • Size

      99.3MB

    • MD5

      cc3d4986f32818a6f5569b18eb101efb

    • SHA1

      fecddb215022931d02cbf0171f625ee245e6cec3

    • SHA256

      d8a3711619f03de66dbe6c1780cf676af51e6c7e63a477a59f3678650cba9f8d

    • SHA512

      a2ace16807d0ed2386a3c92ce9b1fb52aa437e6d9a3dbe2865099cd4d32120291ef80d3f98fa82c4420aeceb38c7f5aded31f4876b1372db81e525403ecbaffc

    • SSDEEP

      1572864:GrqBYS1BgozTVGlDsA1SVAkRnkrwB/MCQGPSWU1JNeFhQeqQBDV3nsgE+ApQkSq:1YS1S6GlDsAYrt9B086y1qQBp3ILQ6

    Score
    7/10
    bootkitpersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks