Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

ff47792967...37.exe

windows7-x64

6

ff47792967...37.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff47792967ca5fa669ac3df77a3e63fe090d11a1f7dc913cbde50eb13f29d137

  • Size

    14.6MB

  • Sample

    231114-q1v8fabd98

  • MD5

    c90e6d8aaa8c4f7deae7f09ca2fbf3e0

  • SHA1

    bf6955618bcc5bbddd732b5fb0b4d7be689f2c80

  • SHA256

    ff47792967ca5fa669ac3df77a3e63fe090d11a1f7dc913cbde50eb13f29d137

  • SHA512

    df8baf02eb192edc654b1f7a8086ccef25292a804d212d00d0abbeff69dbbb4330d58cc63c8331119ec441c9ea0cc856888509ae697ce9624c2efee663d15705

  • SSDEEP

    393216:C9I8YV9Q+nB3nj5uAOHXMBlwWmj8RsfxU6dn:0I8YV2iFuAO3MBlwWmI+pJn

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      ff47792967ca5fa669ac3df77a3e63fe090d11a1f7dc913cbde50eb13f29d137

    • Size

      14.6MB

    • MD5

      c90e6d8aaa8c4f7deae7f09ca2fbf3e0

    • SHA1

      bf6955618bcc5bbddd732b5fb0b4d7be689f2c80

    • SHA256

      ff47792967ca5fa669ac3df77a3e63fe090d11a1f7dc913cbde50eb13f29d137

    • SHA512

      df8baf02eb192edc654b1f7a8086ccef25292a804d212d00d0abbeff69dbbb4330d58cc63c8331119ec441c9ea0cc856888509ae697ce9624c2efee663d15705

    • SSDEEP

      393216:C9I8YV9Q+nB3nj5uAOHXMBlwWmj8RsfxU6dn:0I8YV2iFuAO3MBlwWmI+pJn

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks