Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

9ec976ce93...bd.exe

windows7-x64

7

9ec976ce93...bd.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ec976ce93a4e4613b08df8bbc6bb4d4095edbd6016bb9773145178e7a9d94bd

  • Size

    4.8MB

  • Sample

    231010-k5hj9acd61

  • MD5

    89da5ceb1e8e05b59eaab22358fb8838

  • SHA1

    46f62a8b92a618534e958b8431ea121e7f7e59fb

  • SHA256

    9ec976ce93a4e4613b08df8bbc6bb4d4095edbd6016bb9773145178e7a9d94bd

  • SHA512

    2394b54ff2e1a24805e67186c528e3d82e32223c34f62fa4ad98226c98a02a1b8f744a37f8b1f163f212d340969628377c9614da4db27f8e2f874062d644df79

  • SSDEEP

    98304:DIdfiKLegiKBVPG5o28N15nMApRENOJtS1Xhv6:4jLdz28N1oISjv6

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      9ec976ce93a4e4613b08df8bbc6bb4d4095edbd6016bb9773145178e7a9d94bd

    • Size

      4.8MB

    • MD5

      89da5ceb1e8e05b59eaab22358fb8838

    • SHA1

      46f62a8b92a618534e958b8431ea121e7f7e59fb

    • SHA256

      9ec976ce93a4e4613b08df8bbc6bb4d4095edbd6016bb9773145178e7a9d94bd

    • SHA512

      2394b54ff2e1a24805e67186c528e3d82e32223c34f62fa4ad98226c98a02a1b8f744a37f8b1f163f212d340969628377c9614da4db27f8e2f874062d644df79

    • SSDEEP

      98304:DIdfiKLegiKBVPG5o28N15nMApRENOJtS1Xhv6:4jLdz28N1oISjv6

    Score
    7/10
    bootkitdiscoverypersistence

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks