Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

8d4026927e...ae.exe

windows7-x64

7

8d4026927e...ae.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d4026927e63b4f57f0cf29c9b533eae

  • Size

    12.3MB

  • Sample

    240203-y3l2jshdd2

  • MD5

    8d4026927e63b4f57f0cf29c9b533eae

  • SHA1

    f4cf91a6416fb107e18df48b467ed188ad058db9

  • SHA256

    069ff67f9dd8ce03ffe71958852da3cfd59adbb5d5094f499d155f9e7b61d62d

  • SHA512

    5c3fb03e3e566936d173fe3912e9c01003cb1cb635d0b4d6dc34ce29d3a865016d759a25a8bc4e39d75746f1ec70fc42c80894cb598dac057dc0597f750d20fe

  • SSDEEP

    393216:uoJcTniUayxkDMBswCdv2IxqT3exAICSIO1:9+TniURGYwRYD2

Score
7/10
bootkitpersistencevmprotect

Malware Config

Targets

    • Target

      8d4026927e63b4f57f0cf29c9b533eae

    • Size

      12.3MB

    • MD5

      8d4026927e63b4f57f0cf29c9b533eae

    • SHA1

      f4cf91a6416fb107e18df48b467ed188ad058db9

    • SHA256

      069ff67f9dd8ce03ffe71958852da3cfd59adbb5d5094f499d155f9e7b61d62d

    • SHA512

      5c3fb03e3e566936d173fe3912e9c01003cb1cb635d0b4d6dc34ce29d3a865016d759a25a8bc4e39d75746f1ec70fc42c80894cb598dac057dc0597f750d20fe

    • SSDEEP

      393216:uoJcTniUayxkDMBswCdv2IxqT3exAICSIO1:9+TniURGYwRYD2

    Score
    7/10
    bootkitpersistencevmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks