Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

75ec306eec...ed.exe

windows7-x64

6

75ec306eec...ed.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75ec306eecf7e9aee2064bdad1d9d7123b8350030957f7d7585e7a7bf08e73ed

  • Size

    798KB

  • Sample

    221020-herdcshhcn

  • MD5

    814478968ba07bc0d64a7082dcd990a2

  • SHA1

    f05463a30bf8732223068077374d075d4f1ea047

  • SHA256

    75ec306eecf7e9aee2064bdad1d9d7123b8350030957f7d7585e7a7bf08e73ed

  • SHA512

    b0e89941306df9ee8fcb1ac7613814ab8e551b62c1a9287bb7580ffbd355df26e34da36be8b59a19b92e6e0fab1d166e40d296e060f8bc64df1cfbb4faea2683

  • SSDEEP

    24576:wuQObdrN0MQdEPWm9lawKMhRxSnr4ON5y6Le:wuQOdN0MQdIWmeMhnSnnbS

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      75ec306eecf7e9aee2064bdad1d9d7123b8350030957f7d7585e7a7bf08e73ed

    • Size

      798KB

    • MD5

      814478968ba07bc0d64a7082dcd990a2

    • SHA1

      f05463a30bf8732223068077374d075d4f1ea047

    • SHA256

      75ec306eecf7e9aee2064bdad1d9d7123b8350030957f7d7585e7a7bf08e73ed

    • SHA512

      b0e89941306df9ee8fcb1ac7613814ab8e551b62c1a9287bb7580ffbd355df26e34da36be8b59a19b92e6e0fab1d166e40d296e060f8bc64df1cfbb4faea2683

    • SSDEEP

      24576:wuQObdrN0MQdEPWm9lawKMhRxSnr4ON5y6Le:wuQOdN0MQdIWmeMhnSnnbS

    Score
    6/10
    bootkitpersistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks