Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

0d4d6070bd...bf.exe

windows7-x64

7

0d4d6070bd...bf.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d4d6070bd3422fa1c6e30d533b185bf

  • Size

    202KB

  • Sample

    231230-d9pqssecel

  • MD5

    0d4d6070bd3422fa1c6e30d533b185bf

  • SHA1

    38397e785ca80bce8d3464c63474b22e905492aa

  • SHA256

    7d2ab5c79b5130b9358a36e78f0b724c12ee5e4610dc9ed337901318cc1b0f78

  • SHA512

    48762279304d54368a0074e90821c273a0673fad5a47881a834d03617563dfb1813e29222d47905fcb77d6b4a69468466a2e0fb38471385388aa407d7280a11b

  • SSDEEP

    6144:NHCTecfxmJ5TINDYwUi+pLTAxxNMIehM1CoZSpYgb:pGxG5To8wUi4cxJehvYgb

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      0d4d6070bd3422fa1c6e30d533b185bf

    • Size

      202KB

    • MD5

      0d4d6070bd3422fa1c6e30d533b185bf

    • SHA1

      38397e785ca80bce8d3464c63474b22e905492aa

    • SHA256

      7d2ab5c79b5130b9358a36e78f0b724c12ee5e4610dc9ed337901318cc1b0f78

    • SHA512

      48762279304d54368a0074e90821c273a0673fad5a47881a834d03617563dfb1813e29222d47905fcb77d6b4a69468466a2e0fb38471385388aa407d7280a11b

    • SSDEEP

      6144:NHCTecfxmJ5TINDYwUi+pLTAxxNMIehM1CoZSpYgb:pGxG5To8wUi4cxJehvYgb

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks