Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

ce033e7122...88.dll

windows7-x64

8

ce033e7122...88.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce033e7122990b1c13c24241080daabafa824c7fea207f69f7b20879373c8488

  • Size

    439KB

  • Sample

    221207-b6m2pade68

  • MD5

    6ac19eb52854a4c54f1d15a47006ca40

  • SHA1

    2c047a3096d2eae93f10e81b305db188373dac5f

  • SHA256

    ce033e7122990b1c13c24241080daabafa824c7fea207f69f7b20879373c8488

  • SHA512

    ea881065669ece3200ea0db646f6726bebcfa014320b96da07849c74c19a998250ab1733533e4e33038f804f74358d5a4690e172bbc469c9f74c10b925de1449

  • SSDEEP

    12288:3ci5MfnJSDaSwr3qH+w6NAxcLAcRdAP8QLY7/1C7Jz:3chwDaSs3k+w6ocLAcvAP9YT1k

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      ce033e7122990b1c13c24241080daabafa824c7fea207f69f7b20879373c8488

    • Size

      439KB

    • MD5

      6ac19eb52854a4c54f1d15a47006ca40

    • SHA1

      2c047a3096d2eae93f10e81b305db188373dac5f

    • SHA256

      ce033e7122990b1c13c24241080daabafa824c7fea207f69f7b20879373c8488

    • SHA512

      ea881065669ece3200ea0db646f6726bebcfa014320b96da07849c74c19a998250ab1733533e4e33038f804f74358d5a4690e172bbc469c9f74c10b925de1449

    • SSDEEP

      12288:3ci5MfnJSDaSwr3qH+w6NAxcLAcRdAP8QLY7/1C7Jz:3chwDaSs3k+w6ocLAcvAP9YT1k

    Score
    8/10
    bootkitpersistence

    • Blocklisted process makes network request

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks