Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

0ad9ad17d1...16.exe

windows7-x64

0ad9ad17d1...16.exe

windows10-2004-x64

Resubmissions

02/10/2022, 11:34

221002-npfmhadce7 9

17/09/2022, 05:36

220917-gayq7shbg3 9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ad9ad17d1b03f4ad754b00740bd0516.exe.vir

  • Size

    968KB

  • Sample

    220917-gayq7shbg3

  • MD5

    0ad9ad17d1b03f4ad754b00740bd0516

  • SHA1

    1e14768a4c42d335e7018a900860d0adbd1016b4

  • SHA256

    87e5f6215e6e6d73fc8ffbb9fdd37e96963579ddd2c4b2a23ad29ceec7ee91e0

  • SHA512

    6c7da97865f7becdd947d83d243de3642c312dc9d47608183cc96e486e6156850a09949466f4ae2c7bdc43ccf7e4e1909c3f9b4c91f627f5609682efbbb4c215

  • SSDEEP

    12288:OZzIZM/7ZDj9Ij9UDOzGC2YK7nMU3JYysfR5nWFpPoSGTImBcz:OZzIZM/F9u9IOzpa7MU2ysebATv

Score
9/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      0ad9ad17d1b03f4ad754b00740bd0516.exe.vir

    • Size

      968KB

    • MD5

      0ad9ad17d1b03f4ad754b00740bd0516

    • SHA1

      1e14768a4c42d335e7018a900860d0adbd1016b4

    • SHA256

      87e5f6215e6e6d73fc8ffbb9fdd37e96963579ddd2c4b2a23ad29ceec7ee91e0

    • SHA512

      6c7da97865f7becdd947d83d243de3642c312dc9d47608183cc96e486e6156850a09949466f4ae2c7bdc43ccf7e4e1909c3f9b4c91f627f5609682efbbb4c215

    • SSDEEP

      12288:OZzIZM/7ZDj9Ij9UDOzGC2YK7nMU3JYysfR5nWFpPoSGTImBcz:OZzIZM/F9u9IOzpa7MU2ysebATv

    Score
    9/10
    bootkitpersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks