Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

b29c825dae...69.exe

windows7-x64

6

b29c825dae...69.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b29c825dae53a600e1a67b38800e4653cef13438e15777b8bdf74c5e9d085069

  • Size

    846KB

  • Sample

    221204-pmmtgada9t

  • MD5

    10a67df0d415eba48f26e274c01efd7d

  • SHA1

    5b005e2069f2f86f5d855695c8ae47def3dae5fc

  • SHA256

    b29c825dae53a600e1a67b38800e4653cef13438e15777b8bdf74c5e9d085069

  • SHA512

    56795c41a6b8f263594b0d68f542c973b4554a292d88d9e65f6a7e241cbe259b4e9d46d29a5fe3d7e0cda5719f0a96b57d3d1500489931e05d42f17918e2fe7e

  • SSDEEP

    24576:1X7RHmVwH+/w4c6mv2zbsTYuK0HJNsxxMHuN8d6pthv6bdmJav:fAO4c6yHcuK0HJNsX+uNyst5+d7

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      b29c825dae53a600e1a67b38800e4653cef13438e15777b8bdf74c5e9d085069

    • Size

      846KB

    • MD5

      10a67df0d415eba48f26e274c01efd7d

    • SHA1

      5b005e2069f2f86f5d855695c8ae47def3dae5fc

    • SHA256

      b29c825dae53a600e1a67b38800e4653cef13438e15777b8bdf74c5e9d085069

    • SHA512

      56795c41a6b8f263594b0d68f542c973b4554a292d88d9e65f6a7e241cbe259b4e9d46d29a5fe3d7e0cda5719f0a96b57d3d1500489931e05d42f17918e2fe7e

    • SSDEEP

      24576:1X7RHmVwH+/w4c6mv2zbsTYuK0HJNsxxMHuN8d6pthv6bdmJav:fAO4c6yHcuK0HJNsX+uNyst5+d7

    Score
    6/10
    bootkitpersistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks