Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

2024-07-10...er.exe

windows7-x64

8

2024-07-10...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-07-10_b0a674f3e540801c827953089e6c9f03_avoslocker

  • Size

    4.3MB

  • Sample

    240710-mpjhqashjl

  • MD5

    b0a674f3e540801c827953089e6c9f03

  • SHA1

    d0fbeb2bf51324360835e51b80ae0df4f80c760c

  • SHA256

    c14db4f709fa70fb70c7f3969cee4177d2641c098e06b1909af77e09addfa64f

  • SHA512

    fc2132048a7f8b25ca31e1f3f9a570124834a80633ad5b867513a73e87187c0ce2c2bf6cca1337ba468f3bc45c4c14bbf5d9ba39584ba3aa9d3b1e615a453afc

  • SSDEEP

    98304:dpq/d8kCBwlMyQjujDW9tBcg2jGqwwAqWFnhGJ98j02rSYC6dkB3tiXFR:ecP5ujyp8jGqwwtanagrRC6ONtmFR

Score
8/10
bootkitevasionpersistencetrojan

Malware Config

Targets

    • Target

      2024-07-10_b0a674f3e540801c827953089e6c9f03_avoslocker

    • Size

      4.3MB

    • MD5

      b0a674f3e540801c827953089e6c9f03

    • SHA1

      d0fbeb2bf51324360835e51b80ae0df4f80c760c

    • SHA256

      c14db4f709fa70fb70c7f3969cee4177d2641c098e06b1909af77e09addfa64f

    • SHA512

      fc2132048a7f8b25ca31e1f3f9a570124834a80633ad5b867513a73e87187c0ce2c2bf6cca1337ba468f3bc45c4c14bbf5d9ba39584ba3aa9d3b1e615a453afc

    • SSDEEP

      98304:dpq/d8kCBwlMyQjujDW9tBcg2jGqwwAqWFnhGJ98j02rSYC6dkB3tiXFR:ecP5ujyp8jGqwwtanagrRC6ONtmFR

    Score
    8/10
    bootkitevasionpersistencetrojan

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks