Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

dffbc3ef6a...9a.exe

windows7-x64

8

dffbc3ef6a...9a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dffbc3ef6aa1c5741a6d42a32f1d8ee26b3ac5f57def88f9ca23a1e074bfb09a

  • Size

    219KB

  • Sample

    240612-q8alpsxdpg

  • MD5

    f823004b55e04279e716827eb7d7a78f

  • SHA1

    a20a550aded331ba73ecc5e05449005fb1646216

  • SHA256

    dffbc3ef6aa1c5741a6d42a32f1d8ee26b3ac5f57def88f9ca23a1e074bfb09a

  • SHA512

    d73febcf23b35aa9af446fe16e4b2c48cabe0c3fe481cbd9f380c38704f4b88e75c5d966eda9e57a58f79645b79f6776869e3841606effc34a88ead68039c10d

  • SSDEEP

    3072:Z2RaiKg4xmUh1WXHqw/l+qmOELhakVsm3mxB32tLEv8zfdn5f2dZLCoKOhhCK0KF:Z0KgGwHqwOOELha+sm2D2+UhngNUK4xe

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      dffbc3ef6aa1c5741a6d42a32f1d8ee26b3ac5f57def88f9ca23a1e074bfb09a

    • Size

      219KB

    • MD5

      f823004b55e04279e716827eb7d7a78f

    • SHA1

      a20a550aded331ba73ecc5e05449005fb1646216

    • SHA256

      dffbc3ef6aa1c5741a6d42a32f1d8ee26b3ac5f57def88f9ca23a1e074bfb09a

    • SHA512

      d73febcf23b35aa9af446fe16e4b2c48cabe0c3fe481cbd9f380c38704f4b88e75c5d966eda9e57a58f79645b79f6776869e3841606effc34a88ead68039c10d

    • SSDEEP

      3072:Z2RaiKg4xmUh1WXHqw/l+qmOELhakVsm3mxB32tLEv8zfdn5f2dZLCoKOhhCK0KF:Z0KgGwHqwOOELha+sm2D2+UhngNUK4xe

    Score
    8/10
    bootkitpersistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks