Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

56c7838432...82.exe

windows7-x64

7

56c7838432...82.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56c7838432903618c01c777b8fa6e09778e11728c4d9bd0e658c8973613d5782

  • Size

    3.6MB

  • Sample

    240425-z37hxsfa89

  • MD5

    6f817f77066e4d45b347e9ae654083cd

  • SHA1

    5e3814b174d35ca831f531df5040c66da1a3ce97

  • SHA256

    56c7838432903618c01c777b8fa6e09778e11728c4d9bd0e658c8973613d5782

  • SHA512

    a969e30c363083d6fcf826c01bb6ab381cbe58fc060585ffad059b49cf13eab148d371bc8ad36e1f3cc5caa09c4cce41d8a98a24db8318d7e2571ab0dd4e6ded

  • SSDEEP

    49152:b08OhxtUg9OUi82w6aQp9dgS1GUL38XhCOYc3iJXe9emEPGKOPkQThMYRFnm7LB6:b08vdsGaQNgS1C6e3n5Xkqb

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      56c7838432903618c01c777b8fa6e09778e11728c4d9bd0e658c8973613d5782

    • Size

      3.6MB

    • MD5

      6f817f77066e4d45b347e9ae654083cd

    • SHA1

      5e3814b174d35ca831f531df5040c66da1a3ce97

    • SHA256

      56c7838432903618c01c777b8fa6e09778e11728c4d9bd0e658c8973613d5782

    • SHA512

      a969e30c363083d6fcf826c01bb6ab381cbe58fc060585ffad059b49cf13eab148d371bc8ad36e1f3cc5caa09c4cce41d8a98a24db8318d7e2571ab0dd4e6ded

    • SSDEEP

      49152:b08OhxtUg9OUi82w6aQp9dgS1GUL38XhCOYc3iJXe9emEPGKOPkQThMYRFnm7LB6:b08vdsGaQNgS1C6e3n5Xkqb

    Score
    7/10
    bootkitpersistence

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks