Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

05/07/2024, 19:50

240705-yka7bsthqp 3

05/07/2024, 19:49

240705-yjwrmswhqd 3

05/07/2024, 19:25

240705-x475qswfkb 3

05/07/2024, 19:20

240705-x2kxeswemd 8

05/07/2024, 19:15

240705-xycfwawdqc 8

General

  • Target

    InfiniteBlue (1).exe

  • Size

    1.8MB

  • Sample

    240705-xycfwawdqc

  • MD5

    70b9c08114c970f97ba983227e0f08b4

  • SHA1

    0c3c846828734aed1d74ea47253feef6f81940ac

  • SHA256

    a38f8a7e057e205d3961095a025f5014c0da0567495f2ca5a15f26d89c481026

  • SHA512

    dc223e4cbfe89a8d92b2042b1c8a0403b26adc7383317cbadc56602d1e9c02a4a80450ec5aa243fdb8ef3a0882a20af48c3ebb7165ca58dfe34c62691c36f5eb

  • SSDEEP

    49152:RqrObhdGZu/xJrtcaXxfjDSVQEWnu3+w3JJn+:oExvFXpCQG3+OXn+

Malware Config

Targets

    • Target

      InfiniteBlue (1).exe

    • Size

      1.8MB

    • MD5

      70b9c08114c970f97ba983227e0f08b4

    • SHA1

      0c3c846828734aed1d74ea47253feef6f81940ac

    • SHA256

      a38f8a7e057e205d3961095a025f5014c0da0567495f2ca5a15f26d89c481026

    • SHA512

      dc223e4cbfe89a8d92b2042b1c8a0403b26adc7383317cbadc56602d1e9c02a4a80450ec5aa243fdb8ef3a0882a20af48c3ebb7165ca58dfe34c62691c36f5eb

    • SSDEEP

      49152:RqrObhdGZu/xJrtcaXxfjDSVQEWnu3+w3JJn+:oExvFXpCQG3+OXn+

    • Disables RegEdit via registry modification

    • Disables Task Manager via registry modification

    • Modifies file permissions

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks