Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

58f1dc604d...2f.exe

windows7-x64

8

58f1dc604d...2f.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    58f1dc604d96b41d6027c1960eb79428f16e79275af6a926465a60c2299ee82f

  • Size

    392KB

  • Sample

    221201-exynlsdd72

  • MD5

    a325f38538ebeed4e980b6664a5e4c4e

  • SHA1

    1c24415cc529e61e7036609c992f2f38eb99aa16

  • SHA256

    58f1dc604d96b41d6027c1960eb79428f16e79275af6a926465a60c2299ee82f

  • SHA512

    e3b10290296fab701656767c92f55b56a20bf1d050d56195aa876ba0b7c205cde7ab7f9d17b92b21224909bdf00024fe76e000407539c06a961ca1addfb88a30

  • SSDEEP

    6144:FwalwseW0StDNY5nf4/zn3pjo0MfC4jaL/rGnn+aCyIK3ccnMxjiziQP5BfSF:dlwfytM4rnq0Utja+nW1K3DnsGr3U

Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      58f1dc604d96b41d6027c1960eb79428f16e79275af6a926465a60c2299ee82f

    • Size

      392KB

    • MD5

      a325f38538ebeed4e980b6664a5e4c4e

    • SHA1

      1c24415cc529e61e7036609c992f2f38eb99aa16

    • SHA256

      58f1dc604d96b41d6027c1960eb79428f16e79275af6a926465a60c2299ee82f

    • SHA512

      e3b10290296fab701656767c92f55b56a20bf1d050d56195aa876ba0b7c205cde7ab7f9d17b92b21224909bdf00024fe76e000407539c06a961ca1addfb88a30

    • SSDEEP

      6144:FwalwseW0StDNY5nf4/zn3pjo0MfC4jaL/rGnn+aCyIK3ccnMxjiziQP5BfSF:dlwfytM4rnq0Utja+nW1K3DnsGr3U

    Score
    8/10
    bootkitpersistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks