Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

ff151251cd...d7.exe

windows7-x64

8

ff151251cd...d7.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff151251cdecb112125ac430a21cd7e398a92475b06dad82a125f967836496d7

  • Size

    318KB

  • Sample

    221204-l8kdpahg77

  • MD5

    0e923d29d6ae9be0ce1fdecd90793ddd

  • SHA1

    4c9237d2318a5d70d761385778f4302e267cbe8e

  • SHA256

    ff151251cdecb112125ac430a21cd7e398a92475b06dad82a125f967836496d7

  • SHA512

    9e6a9943901889ecf5b672fd5b199448d5f5982df5587d23c62a4a24da5da1c654867d09e91a066106e45c932ba70f834333991a9ea386c241ac2b91d900bd32

  • SSDEEP

    6144:jNM3Wm2uXVRG9QS+HWmLjeGQJ5gihmC5LLIMAxb0rbRPB09PYDOFJ/o9oS:S3WR+RtHWQQJS0NLLIMa0/R4YDOv/o9Z

Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      ff151251cdecb112125ac430a21cd7e398a92475b06dad82a125f967836496d7

    • Size

      318KB

    • MD5

      0e923d29d6ae9be0ce1fdecd90793ddd

    • SHA1

      4c9237d2318a5d70d761385778f4302e267cbe8e

    • SHA256

      ff151251cdecb112125ac430a21cd7e398a92475b06dad82a125f967836496d7

    • SHA512

      9e6a9943901889ecf5b672fd5b199448d5f5982df5587d23c62a4a24da5da1c654867d09e91a066106e45c932ba70f834333991a9ea386c241ac2b91d900bd32

    • SSDEEP

      6144:jNM3Wm2uXVRG9QS+HWmLjeGQJ5gihmC5LLIMAxb0rbRPB09PYDOFJ/o9oS:S3WR+RtHWQQJS0NLLIMa0/R4YDOv/o9Z

    Score
    8/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks