Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

e0e3af12a8...04.exe

windows7-x64

7

e0e3af12a8...04.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e0e3af12a876bd1af6395c15cb19192ddc115cf808772805d12d1b754ecc3104

  • Size

    13.9MB

  • Sample

    231009-c7p34sbh94

  • MD5

    1ed36d3c530539d389f8bffb7e9864e0

  • SHA1

    bc8f0399ae3e323ac78353910e13f4eb3c6fd6fe

  • SHA256

    e0e3af12a876bd1af6395c15cb19192ddc115cf808772805d12d1b754ecc3104

  • SHA512

    7a4954e68ca2c06d890f0a6afee0bbd4423ec6746f854c5eebf3597499ce954fe3cf773d1e4278b0a08a99f4f95d731088a27208d12cb001de010bcdfb33b4c8

  • SSDEEP

    393216:uSRUjcPcXvEVTkZsQhWtR9CaLYg7Zn9MnAeyjl0SgGyhyxoCuIv:hUjcfTylyemYg75+nArx0S+S

Score
7/10
bootkitpersistenceupxvmprotect

Malware Config

Targets

    • Target

      e0e3af12a876bd1af6395c15cb19192ddc115cf808772805d12d1b754ecc3104

    • Size

      13.9MB

    • MD5

      1ed36d3c530539d389f8bffb7e9864e0

    • SHA1

      bc8f0399ae3e323ac78353910e13f4eb3c6fd6fe

    • SHA256

      e0e3af12a876bd1af6395c15cb19192ddc115cf808772805d12d1b754ecc3104

    • SHA512

      7a4954e68ca2c06d890f0a6afee0bbd4423ec6746f854c5eebf3597499ce954fe3cf773d1e4278b0a08a99f4f95d731088a27208d12cb001de010bcdfb33b4c8

    • SSDEEP

      393216:uSRUjcPcXvEVTkZsQhWtR9CaLYg7Zn9MnAeyjl0SgGyhyxoCuIv:hUjcfTylyemYg75+nArx0S+S

    Score
    7/10
    bootkitpersistenceupxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks