717ecce3057adfe6d40172158d6334a0177064d24fea6b3b78481a8c5ee4076a | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

717ecce305...6a.exe

windows7-x64

9

717ecce305...6a.exe

windows10-2004-x64

9

Sharing

General

Target

717ecce3057adfe6d40172158d6334a0177064d24fea6b3b78481a8c5ee4076a
Size

7.2MB
Sample

240610-3cjkysvglr
MD5

68039ea285456b07636828f963515e22
SHA1

d0a086a3dc0cdf1eb05219f909a4cd234c57dfd5
SHA256

717ecce3057adfe6d40172158d6334a0177064d24fea6b3b78481a8c5ee4076a
SHA512

184fdae7214d880573519be8b8b0a0aa84de5714093fb036757f994a98163e432eaed1ccf7797fda25c446fc168c37b6d756cc1ec374669e3721c645aeb0188a
SSDEEP

98304:47O82rQfXHndMdQIvJ0Cd/C5jKRbAlAQAzNwpUJx4O875RjfxIrfvoYJMZx68owi:4CQP6QUJ0s/CWAOpWi6RrxYvD+68owi

Score

10^/10

bootkit persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

717ecce3057adfe6d40172158d6334a0177064d24fea6b3b78481a8c5ee4076a.exe

Resource

win7-20240508-en

bootkit persistence upx

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

717ecce3057adfe6d40172158d6334a0177064d24fea6b3b78481a8c5ee4076a.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  717ecce3057adfe6d40172158d6334a0177064d24fea6b3b78481a8c5ee4076a
- Size
  
  7.2MB
- MD5
  
  68039ea285456b07636828f963515e22
- SHA1
  
  d0a086a3dc0cdf1eb05219f909a4cd234c57dfd5
- SHA256
  
  717ecce3057adfe6d40172158d6334a0177064d24fea6b3b78481a8c5ee4076a
- SHA512
  
  184fdae7214d880573519be8b8b0a0aa84de5714093fb036757f994a98163e432eaed1ccf7797fda25c446fc168c37b6d756cc1ec374669e3721c645aeb0188a
- SSDEEP
  
  98304:47O82rQfXHndMdQIvJ0Cd/C5jKRbAlAQAzNwpUJx4O875RjfxIrfvoYJMZx68owi:4CQP6QUJ0s/CWAOpWi6RrxYvD+68owi
Score

9^/10

bootkit persistence upx
- UPX dump on OEP (original entry point)
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Modify Registry

Pre-OS Boot

Bootkit

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistenceupx

behavioral2

© 2018-2025

Terms | Privacy