Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

a1ce6f9787...f2.exe

windows7-x64

8

a1ce6f9787...f2.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1ce6f9787ff0690971dc19702b5d3613fde68998dfaf4cae1502769f15beef2

  • Size

    222KB

  • Sample

    221204-pp6pcshd99

  • MD5

    96c342a561beec43d9bdcf1749d3a825

  • SHA1

    a13d8f16c7a84998f0bca6368eed8641a513facc

  • SHA256

    a1ce6f9787ff0690971dc19702b5d3613fde68998dfaf4cae1502769f15beef2

  • SHA512

    09b7332ff9ee89f74cb165d1a8fe196dc4554e10373181ec7c68116eb7adc700ba981cff4e956dc86811d6ff7fda6b3fc5bbf05ba9f06ffe3a2a7dfd1a73b8b7

  • SSDEEP

    6144:alMaxD94Q9+sBQrmBKGxlShqWU+AAG2Z+aO8UUjsvQI:+MaxDqQxXKGiQ3AG8Uz

Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      a1ce6f9787ff0690971dc19702b5d3613fde68998dfaf4cae1502769f15beef2

    • Size

      222KB

    • MD5

      96c342a561beec43d9bdcf1749d3a825

    • SHA1

      a13d8f16c7a84998f0bca6368eed8641a513facc

    • SHA256

      a1ce6f9787ff0690971dc19702b5d3613fde68998dfaf4cae1502769f15beef2

    • SHA512

      09b7332ff9ee89f74cb165d1a8fe196dc4554e10373181ec7c68116eb7adc700ba981cff4e956dc86811d6ff7fda6b3fc5bbf05ba9f06ffe3a2a7dfd1a73b8b7

    • SSDEEP

      6144:alMaxD94Q9+sBQrmBKGxlShqWU+AAG2Z+aO8UUjsvQI:+MaxDqQxXKGiQ3AG8Uz

    Score
    8/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks