Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3fcffa0ad0d8d8b9dc47372872e106db12b82fdba724e1f57c0422abc5d3af88

  • Size

    2.8MB

  • Sample

    240817-g4n4vs1fmf

  • MD5

    23e682f4cd8bb3e77a15ea3a9438d56e

  • SHA1

    2b90e1c8f926753eca86897a746f1b62b757ef7f

  • SHA256

    3fcffa0ad0d8d8b9dc47372872e106db12b82fdba724e1f57c0422abc5d3af88

  • SHA512

    607e922421f0dad25ad58e416c08f987091d5a7484ff20df7d5144cc4bd80d09bb445b1340dd2e6571d7a76e10aef064eb818e0e9f2f47aa719407d66fa67a9d

  • SSDEEP

    49152:F7lbybaNvP+Y7PezVcKvgvIUXVD49aPW0YDEPcx+Goq3to:DbybaFiiKvgwW5m/Ul

Malware Config

Targets

    • Target

      3fcffa0ad0d8d8b9dc47372872e106db12b82fdba724e1f57c0422abc5d3af88

    • Size

      2.8MB

    • MD5

      23e682f4cd8bb3e77a15ea3a9438d56e

    • SHA1

      2b90e1c8f926753eca86897a746f1b62b757ef7f

    • SHA256

      3fcffa0ad0d8d8b9dc47372872e106db12b82fdba724e1f57c0422abc5d3af88

    • SHA512

      607e922421f0dad25ad58e416c08f987091d5a7484ff20df7d5144cc4bd80d09bb445b1340dd2e6571d7a76e10aef064eb818e0e9f2f47aa719407d66fa67a9d

    • SSDEEP

      49152:F7lbybaNvP+Y7PezVcKvgvIUXVD49aPW0YDEPcx+Goq3to:DbybaFiiKvgwW5m/Ul

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks