Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

8

14ca781f42...3f.exe

windows7-x64

9

14ca781f42...3f.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14ca781f429f7d84132256ab68c70c28a4d3be86c8ac4d901f9a4ebc303ee93f

  • Size

    3.2MB

  • Sample

    221127-awhtjsfh93

  • MD5

    9da4d34c63790562fcf7258515d05c45

  • SHA1

    70825648789314017e7557bb14eb84ccdf10a379

  • SHA256

    14ca781f429f7d84132256ab68c70c28a4d3be86c8ac4d901f9a4ebc303ee93f

  • SHA512

    bbcfe8453c9df563a0cd46a8ee5a699d838e29e3788359845730a0ac7a648b24ef8c38313cb829fd999c10832494177933a8a97fa81a3bcec5f0423c5dc13857

  • SSDEEP

    98304:K1DofoRV6Jt/rDMUNAv7kTfuX48HPcC2P6Cd6cpxujdf:K1EfoKkXv7No6cpMj

Score
9/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      14ca781f429f7d84132256ab68c70c28a4d3be86c8ac4d901f9a4ebc303ee93f

    • Size

      3.2MB

    • MD5

      9da4d34c63790562fcf7258515d05c45

    • SHA1

      70825648789314017e7557bb14eb84ccdf10a379

    • SHA256

      14ca781f429f7d84132256ab68c70c28a4d3be86c8ac4d901f9a4ebc303ee93f

    • SHA512

      bbcfe8453c9df563a0cd46a8ee5a699d838e29e3788359845730a0ac7a648b24ef8c38313cb829fd999c10832494177933a8a97fa81a3bcec5f0423c5dc13857

    • SSDEEP

      98304:K1DofoRV6Jt/rDMUNAv7kTfuX48HPcC2P6Cd6cpxujdf:K1EfoKkXv7No6cpMj

    Score
    9/10
    bootkitpersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks