Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
14/02/2024, 13:43
General
-
Target
9bd36a5e93a4f34e582236e44d1359d7.exe
-
Size
172KB
-
MD5
9bd36a5e93a4f34e582236e44d1359d7
-
SHA1
5001d1eb7408edc03a5d5298cf0eece84224383a
-
SHA256
3b063f17360b138487c9b1789cf5cab3aae58a5ee1937ec38f3b437556a82d42
-
SHA512
b5532f9b0fcd8cc974c1e10e324828eaecc72f7de850ef21f76f0fb8e265ef9cf4560bb64397c6c902cc6208a33a3c6e8b8b6ddbe8be07f4cbd8a23389928b35
-
SSDEEP
3072:LmmT9KkU5kXNYRfVk2LVRbsAXWlJutqR4fq+:LV4kU5RiKVWK3
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9bd36a5e93a4f34e582236e44d1359d7.exe"C:\Users\Admin\AppData\Local\Temp\9bd36a5e93a4f34e582236e44d1359d7.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious behavior: EnumeratesProcesses