Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5f0dfac841...41.exe

windows7-x64

10

5f0dfac841...41.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f0dfac841bb89908d138bc3eea8634738362ca8003524e2e4e81c9807ae4f41

  • Size

    104KB

  • Sample

    221011-k2j9nsfebj

  • MD5

    6b3fc93e3db0663640ae3abe6766dcbe

  • SHA1

    7dfd4c6735db9519a65d8bbb9120673eb0496035

  • SHA256

    5f0dfac841bb89908d138bc3eea8634738362ca8003524e2e4e81c9807ae4f41

  • SHA512

    d93d898e4369aa28f44c6fc9e80ac38d9d3979e3895c5d9a99cd9b263aff0e83de807f68e301a0973c4ac6e94530550b51c5d3025ba534fa6665b28a3506c762

  • SSDEEP

    1536:j6CHOOMyRIKOrKTgoV5d3s6wUinu9u3okkBwKCe/LiwKCel:7HOOMyRI7kgoLd3H9xeokkBwI/LiwIl

Score
10/10
bootkitevasionpersistence

Malware Config

Targets

    • Target

      5f0dfac841bb89908d138bc3eea8634738362ca8003524e2e4e81c9807ae4f41

    • Size

      104KB

    • MD5

      6b3fc93e3db0663640ae3abe6766dcbe

    • SHA1

      7dfd4c6735db9519a65d8bbb9120673eb0496035

    • SHA256

      5f0dfac841bb89908d138bc3eea8634738362ca8003524e2e4e81c9807ae4f41

    • SHA512

      d93d898e4369aa28f44c6fc9e80ac38d9d3979e3895c5d9a99cd9b263aff0e83de807f68e301a0973c4ac6e94530550b51c5d3025ba534fa6665b28a3506c762

    • SSDEEP

      1536:j6CHOOMyRIKOrKTgoV5d3s6wUinu9u3okkBwKCe/LiwKCel:7HOOMyRI7kgoLd3H9xeokkBwI/LiwIl

    Score
    10/10
    bootkitevasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks