Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

9354661c3f...9c.exe

windows7-x64

8

9354661c3f...9c.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9354661c3f9559fa7ae07649a00c3f8682c9d7e0187c3daf24b570dab2930f9c

  • Size

    268KB

  • Sample

    221205-lp2hvsbh9s

  • MD5

    64fe22577fa976e2d42d122a04a74553

  • SHA1

    b82d473befb2d938ed1e93b179030d2e23a00c16

  • SHA256

    9354661c3f9559fa7ae07649a00c3f8682c9d7e0187c3daf24b570dab2930f9c

  • SHA512

    dedee7831a277f7a46f906d7cb5d4e6af6add5b5b6abaa697440beb57123aa58663f4cf56cd6c6cc953809db3299f04473f167aa8655f9966222416633c3598a

  • SSDEEP

    3072:vwVIvoOqzSaoV9K9QO17bPFcpDuBplAa+0GgPvD1FzfwVYZODFZaFFw811Cx2w:PoCQ4DAp2a+ZgPJFzfq2OD7/Aoxh

Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      9354661c3f9559fa7ae07649a00c3f8682c9d7e0187c3daf24b570dab2930f9c

    • Size

      268KB

    • MD5

      64fe22577fa976e2d42d122a04a74553

    • SHA1

      b82d473befb2d938ed1e93b179030d2e23a00c16

    • SHA256

      9354661c3f9559fa7ae07649a00c3f8682c9d7e0187c3daf24b570dab2930f9c

    • SHA512

      dedee7831a277f7a46f906d7cb5d4e6af6add5b5b6abaa697440beb57123aa58663f4cf56cd6c6cc953809db3299f04473f167aa8655f9966222416633c3598a

    • SSDEEP

      3072:vwVIvoOqzSaoV9K9QO17bPFcpDuBplAa+0GgPvD1FzfwVYZODFZaFFw811Cx2w:PoCQ4DAp2a+ZgPJFzfq2OD7/Aoxh

    Score
    8/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks