Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Game.exe

  • Size

    137KB

  • Sample

    250321-jzkxravwhx

  • MD5

    bd9ebb7d09f9111a9f0a0ba2238eaf80

  • SHA1

    28c753124d845f61373be87d392ab839914ebdc5

  • SHA256

    e5435c0e86a8181a3d88206d5dd47145f2aa768afcae6d8c2ae449f8601a8724

  • SHA512

    f2dcdc9a1e64af74eeded730112d87d97ca2e5d894f25324b27c5f1b0680c948e3bcc73136615a4822ac6a75ac43c3b21fb8dcd031ae4203c2798bc6f9773231

  • SSDEEP

    3072:fWK+I+/wslzo5lwTU6gixJpLOaHIYsrIjPW4:fWK+xZSixJEaoYsM+4

Malware Config

Targets

    • Target

      Game.exe

    • Size

      137KB

    • MD5

      bd9ebb7d09f9111a9f0a0ba2238eaf80

    • SHA1

      28c753124d845f61373be87d392ab839914ebdc5

    • SHA256

      e5435c0e86a8181a3d88206d5dd47145f2aa768afcae6d8c2ae449f8601a8724

    • SHA512

      f2dcdc9a1e64af74eeded730112d87d97ca2e5d894f25324b27c5f1b0680c948e3bcc73136615a4822ac6a75ac43c3b21fb8dcd031ae4203c2798bc6f9773231

    • SSDEEP

      3072:fWK+I+/wslzo5lwTU6gixJpLOaHIYsrIjPW4:fWK+xZSixJEaoYsM+4

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks