Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

beb4479c7c...97.exe

windows7-x64

7

beb4479c7c...97.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    beb4479c7ca079bcfd383c866dabcd97

  • Size

    136KB

  • Sample

    240310-qj2znadd47

  • MD5

    beb4479c7ca079bcfd383c866dabcd97

  • SHA1

    3f936a598933295519e5cca4a1c6f270ea61ec79

  • SHA256

    7a75e1ccffbb48b833a6c0568d312282857e397024fcf134870914831e11b21f

  • SHA512

    6ee3b17c0321e90b48e1ab935c77f419d7646a47394ecb74d18cb94a45230629e0ea0cb413b97aa52c579c8a70697f514af6662b10df140eeeef2c6ed892505a

  • SSDEEP

    3072:Lj51Phc8CVrFRsEOIVC1bPw3l4/VVlW0iqf2Tf4SHSle:Lj5M8CVpRs6C1Dw3WNVlW0iqwf4SHSl

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      beb4479c7ca079bcfd383c866dabcd97

    • Size

      136KB

    • MD5

      beb4479c7ca079bcfd383c866dabcd97

    • SHA1

      3f936a598933295519e5cca4a1c6f270ea61ec79

    • SHA256

      7a75e1ccffbb48b833a6c0568d312282857e397024fcf134870914831e11b21f

    • SHA512

      6ee3b17c0321e90b48e1ab935c77f419d7646a47394ecb74d18cb94a45230629e0ea0cb413b97aa52c579c8a70697f514af6662b10df140eeeef2c6ed892505a

    • SSDEEP

      3072:Lj51Phc8CVrFRsEOIVC1bPw3l4/VVlW0iqf2Tf4SHSle:Lj5M8CVpRs6C1Dw3WNVlW0iqwf4SHSl

    Score
    7/10
    bootkitpersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks