Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

c10c5eac83...cb.exe

windows7-x64

9

c10c5eac83...cb.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c10c5eac838f55c68fb503fd50f3d7cb2cc305f5b1e9892bc1d89b8dbea166cb

  • Size

    1.2MB

  • Sample

    221125-1g8drsgf75

  • MD5

    022aeb03f4cb3c64ae951fea225d8716

  • SHA1

    357b321474f6e5dded1bea1fe37f3ed4ff180085

  • SHA256

    c10c5eac838f55c68fb503fd50f3d7cb2cc305f5b1e9892bc1d89b8dbea166cb

  • SHA512

    a1ec629327036b9e36b5322ffc199663f1da15bca11269302a24aaea4961872d34ab339a3aa9942227f8d87a7b683827e4a5a15c0a7d4ebeb9d1b53b224c1f60

  • SSDEEP

    24576:+dq2KwLjdZWZO1X4Hj9a7pmPWBJMpCQNFfC2Y5G3a:+dDpNjQ/a2Sl

Score
9/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      c10c5eac838f55c68fb503fd50f3d7cb2cc305f5b1e9892bc1d89b8dbea166cb

    • Size

      1.2MB

    • MD5

      022aeb03f4cb3c64ae951fea225d8716

    • SHA1

      357b321474f6e5dded1bea1fe37f3ed4ff180085

    • SHA256

      c10c5eac838f55c68fb503fd50f3d7cb2cc305f5b1e9892bc1d89b8dbea166cb

    • SHA512

      a1ec629327036b9e36b5322ffc199663f1da15bca11269302a24aaea4961872d34ab339a3aa9942227f8d87a7b683827e4a5a15c0a7d4ebeb9d1b53b224c1f60

    • SSDEEP

      24576:+dq2KwLjdZWZO1X4Hj9a7pmPWBJMpCQNFfC2Y5G3a:+dDpNjQ/a2Sl

    Score
    9/10
    bootkitpersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks