Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

17f0e6aa2a...d1.exe

windows7-x64

6

17f0e6aa2a...d1.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17f0e6aa2ac024e377f588e2fa2c0fd1

  • Size

    496KB

  • Sample

    231230-n8pphsffe7

  • MD5

    17f0e6aa2ac024e377f588e2fa2c0fd1

  • SHA1

    97daef202c820f64ad9ebeebdf816bc6e2591ebc

  • SHA256

    766f241f83e640e3a500ac6c47782451e08c2f5da4761632109eab20bb8fb765

  • SHA512

    7d99bcf57f15b4c0ad9aa99d6bc2898a8a5fa7b35c4cfdd6e7b73c0a6bcc01252ac11418018f08892eccbd614664ecb399be294d8f0f6d279442ed7e5068605c

  • SSDEEP

    6144:RJQRhBT22sPJKylE+Ry08yNHoQ6JZwbQN6XYxYOlztswlnL8z8oAZqrH9xI:R6RhBT2/JV6Fwbs6kPzywlnuAU5xI

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      17f0e6aa2ac024e377f588e2fa2c0fd1

    • Size

      496KB

    • MD5

      17f0e6aa2ac024e377f588e2fa2c0fd1

    • SHA1

      97daef202c820f64ad9ebeebdf816bc6e2591ebc

    • SHA256

      766f241f83e640e3a500ac6c47782451e08c2f5da4761632109eab20bb8fb765

    • SHA512

      7d99bcf57f15b4c0ad9aa99d6bc2898a8a5fa7b35c4cfdd6e7b73c0a6bcc01252ac11418018f08892eccbd614664ecb399be294d8f0f6d279442ed7e5068605c

    • SSDEEP

      6144:RJQRhBT22sPJKylE+Ry08yNHoQ6JZwbQN6XYxYOlztswlnL8z8oAZqrH9xI:R6RhBT2/JV6Fwbs6kPzywlnuAU5xI

    Score
    6/10
    bootkitpersistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks