Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Bloxstrap.exe
-
Size
8.6MB
-
Sample
240706-j4gqwsvaqg
-
MD5
299f66389937049af891ae9ec1c3a6d3
-
SHA1
1a1f4a2ef6d148101a83d59bf18cf5f76f46806a
-
SHA256
b38eef5655d6d82d526e9841bc95c67374e79e4ca2a15e642eb299c4e3ff24ff
-
SHA512
0c1cc9f8fb8ea3b8b2fc4b329baa12dae725ef2e2b79cfa0f51e3cc8e9913925fd6686fdb8767e87f55e68a9f8a1740285a7277ce19f6581fc28553f33dff653
-
SSDEEP
98304:D0d5D8d5DlTsed5DDlLpOcvGWD3pkMOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrTO:Dfs63vG0XObAbN0f
Static task
static1
Behavioral task
behavioral1
Sample
Bloxstrap.exe
Resource
win11-20240704-en
Malware Config
Targets
-
-
Target
Bloxstrap.exe
-
Size
8.6MB
-
MD5
299f66389937049af891ae9ec1c3a6d3
-
SHA1
1a1f4a2ef6d148101a83d59bf18cf5f76f46806a
-
SHA256
b38eef5655d6d82d526e9841bc95c67374e79e4ca2a15e642eb299c4e3ff24ff
-
SHA512
0c1cc9f8fb8ea3b8b2fc4b329baa12dae725ef2e2b79cfa0f51e3cc8e9913925fd6686fdb8767e87f55e68a9f8a1740285a7277ce19f6581fc28553f33dff653
-
SSDEEP
98304:D0d5D8d5DlTsed5DDlLpOcvGWD3pkMOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrTO:Dfs63vG0XObAbN0f
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-