Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

b2b298d714...9f.exe

windows7-x64

9

b2b298d714...9f.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2b298d7141357647bb144ea8aa62737733e336f385ea802e614ecf9764b5a9f

  • Size

    7.9MB

  • Sample

    221127-z9vgyaac66

  • MD5

    8949b8ba5aaa5fe716e860d90d4cfedb

  • SHA1

    1eb29684b83e0d12cd9dbb9546668e7f14c21207

  • SHA256

    b2b298d7141357647bb144ea8aa62737733e336f385ea802e614ecf9764b5a9f

  • SHA512

    32513ef8fb94d737c78cdaf0b8b832307314b2a33a95c642409b4042dc18691fd1aa1a1a0cd468065d5b3bf11976ea1b32fb49b51ed5cee60f4172af4bc073e4

  • SSDEEP

    196608:Brg5GjqMEnMgvs/s7veVyzXAl0xog7h9gb/ChVdV6pFrXhKNn7R+:S5JMUMgveszeVwIQv9WK9KrINn7A

Score
9/10
bootkitpersistence

Malware Config

Targets

    • Target

      b2b298d7141357647bb144ea8aa62737733e336f385ea802e614ecf9764b5a9f

    • Size

      7.9MB

    • MD5

      8949b8ba5aaa5fe716e860d90d4cfedb

    • SHA1

      1eb29684b83e0d12cd9dbb9546668e7f14c21207

    • SHA256

      b2b298d7141357647bb144ea8aa62737733e336f385ea802e614ecf9764b5a9f

    • SHA512

      32513ef8fb94d737c78cdaf0b8b832307314b2a33a95c642409b4042dc18691fd1aa1a1a0cd468065d5b3bf11976ea1b32fb49b51ed5cee60f4172af4bc073e4

    • SSDEEP

      196608:Brg5GjqMEnMgvs/s7veVyzXAl0xog7h9gb/ChVdV6pFrXhKNn7R+:S5JMUMgveszeVwIQv9WK9KrINn7A

    Score
    9/10
    bootkitpersistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks