Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

6416fed720...4c.exe

windows7-x64

7

6416fed720...4c.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6416fed720d4d04943e4f0de392e69cd6576c29f674fd7647864938a214c7f4c

  • Size

    20.9MB

  • Sample

    230420-k73yzaag7v

  • MD5

    caaa8a8775425f0157c21e5dbad52ab3

  • SHA1

    284c3a5547de98e75359c9c1e51375ab443d5d89

  • SHA256

    6416fed720d4d04943e4f0de392e69cd6576c29f674fd7647864938a214c7f4c

  • SHA512

    7fe8251f16b78bc21bbe39c7e7e4526cb036558745f6435c9ad438b6c23239bbafa9e5496b2d383b708122c01e131b3ceda158ac70e2ccead0ce926e3b4250ec

  • SSDEEP

    393216:ulD99jOVfkG7jhjxf5t5w6Y/tyD0VzPk2ck5ucrvbwGIz2wefkpo7U8KXy:A4Vfk8hjxf5IjE9CrvbwHgsy91

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      6416fed720d4d04943e4f0de392e69cd6576c29f674fd7647864938a214c7f4c

    • Size

      20.9MB

    • MD5

      caaa8a8775425f0157c21e5dbad52ab3

    • SHA1

      284c3a5547de98e75359c9c1e51375ab443d5d89

    • SHA256

      6416fed720d4d04943e4f0de392e69cd6576c29f674fd7647864938a214c7f4c

    • SHA512

      7fe8251f16b78bc21bbe39c7e7e4526cb036558745f6435c9ad438b6c23239bbafa9e5496b2d383b708122c01e131b3ceda158ac70e2ccead0ce926e3b4250ec

    • SSDEEP

      393216:ulD99jOVfkG7jhjxf5t5w6Y/tyD0VzPk2ck5ucrvbwGIz2wefkpo7U8KXy:A4Vfk8hjxf5IjE9CrvbwHgsy91

    Score
    7/10
    bootkitpersistenceupx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks