Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

c74f778cbc...c4.exe

windows7-x64

6

c74f778cbc...c4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c74f778cbc9bbd030a611927e8a4b43ffbc91b9d595c0c6dd27674601657e7c4

  • Size

    406KB

  • Sample

    221205-gzthsacf37

  • MD5

    9c3d25a355e7a7278d865e89f1a46468

  • SHA1

    c55c2490a40b4084352a6f9bc465c4d838d281b7

  • SHA256

    c74f778cbc9bbd030a611927e8a4b43ffbc91b9d595c0c6dd27674601657e7c4

  • SHA512

    17ad171fd300b4d0a4e853942ac0fe9925cab1978254f19ccc5e397d3c795d1f02762c1893b4665f8f455882d27cb2cf52a7027da645e7b4d640948e7866be44

  • SSDEEP

    12288:PRksbZaslyiNuCrHqfk3fVyLmg/Tf2LHrT:PR7bCcuUqfkvELT0T

Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      c74f778cbc9bbd030a611927e8a4b43ffbc91b9d595c0c6dd27674601657e7c4

    • Size

      406KB

    • MD5

      9c3d25a355e7a7278d865e89f1a46468

    • SHA1

      c55c2490a40b4084352a6f9bc465c4d838d281b7

    • SHA256

      c74f778cbc9bbd030a611927e8a4b43ffbc91b9d595c0c6dd27674601657e7c4

    • SHA512

      17ad171fd300b4d0a4e853942ac0fe9925cab1978254f19ccc5e397d3c795d1f02762c1893b4665f8f455882d27cb2cf52a7027da645e7b4d640948e7866be44

    • SSDEEP

      12288:PRksbZaslyiNuCrHqfk3fVyLmg/Tf2LHrT:PR7bCcuUqfkvELT0T

    Score
    8/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks