Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

a094342d28...3f.exe

windows7-x64

8

a094342d28...3f.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a094342d281db61eccf530d2406b3760cc7baa6fef1bd75b162d54d9cc3b0c3f

  • Size

    814KB

  • Sample

    221011-hw8nzabfbj

  • MD5

    6f806557a708ece6ff79e3d45341fcc8

  • SHA1

    344193fdf9877b7cada23ab145a90ca91969db31

  • SHA256

    a094342d281db61eccf530d2406b3760cc7baa6fef1bd75b162d54d9cc3b0c3f

  • SHA512

    3b93f9b2196526417219e5f11204fc42047460063a7f54629353ef93eb44513cf9d4a6e5a55997dc895ccf28c2f6779467102fb73c692ca7155933a68dd39f28

  • SSDEEP

    24576:/J4WIZ/LLxxIsiS7IuDXh6vSiq6zwl5JSqa9:/JBIZzFxV0uDhN2gDSqa9

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      a094342d281db61eccf530d2406b3760cc7baa6fef1bd75b162d54d9cc3b0c3f

    • Size

      814KB

    • MD5

      6f806557a708ece6ff79e3d45341fcc8

    • SHA1

      344193fdf9877b7cada23ab145a90ca91969db31

    • SHA256

      a094342d281db61eccf530d2406b3760cc7baa6fef1bd75b162d54d9cc3b0c3f

    • SHA512

      3b93f9b2196526417219e5f11204fc42047460063a7f54629353ef93eb44513cf9d4a6e5a55997dc895ccf28c2f6779467102fb73c692ca7155933a68dd39f28

    • SSDEEP

      24576:/J4WIZ/LLxxIsiS7IuDXh6vSiq6zwl5JSqa9:/JBIZzFxV0uDhN2gDSqa9

    Score
    8/10
    bootkitpersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks