Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

17d1ef652a...8b.exe

windows7-x64

7

17d1ef652a...8b.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17d1ef652aeab6742fd3ace69b7d078b

  • Size

    470KB

  • Sample

    231230-n6d51aehe8

  • MD5

    17d1ef652aeab6742fd3ace69b7d078b

  • SHA1

    b6569eed7f75368aa00f757d3ad033b7fccb4d16

  • SHA256

    8f5987f11347271609e849a69981a98241d757e32cbd6f2447354db9581832e0

  • SHA512

    07d71fc99aefbc1a37d81cbcfd658c164b8288661c0166b7015cee86a53d0dad7343a170f763b3fc0e81473d7b51c302b63a253e3ff0fad5651c55504502abe9

  • SSDEEP

    6144:aM5KmiAjKCce8mr2yJwjVa3vHtBhaLeefv2BQb/d/Rh8IMD0q7MJf56hCkP:dKmiAiu2yJ4Leefv2Gb/PhjaMxox

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      17d1ef652aeab6742fd3ace69b7d078b

    • Size

      470KB

    • MD5

      17d1ef652aeab6742fd3ace69b7d078b

    • SHA1

      b6569eed7f75368aa00f757d3ad033b7fccb4d16

    • SHA256

      8f5987f11347271609e849a69981a98241d757e32cbd6f2447354db9581832e0

    • SHA512

      07d71fc99aefbc1a37d81cbcfd658c164b8288661c0166b7015cee86a53d0dad7343a170f763b3fc0e81473d7b51c302b63a253e3ff0fad5651c55504502abe9

    • SSDEEP

      6144:aM5KmiAjKCce8mr2yJwjVa3vHtBhaLeefv2BQb/d/Rh8IMD0q7MJf56hCkP:dKmiAiu2yJ4Leefv2Gb/PhjaMxox

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks