Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
291s -
max time network
257s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
25/07/2024, 22:31
General
-
Target
0a7f5c6dcd28bb596d799ca964b2abea06dbf3b72190735e16fc8fbb367b800f.exe
-
Size
545KB
-
MD5
2f4fb61c900fcb327189876c7c290c47
-
SHA1
2c18cb1d758604e5a3908fe323ebabce905a1667
-
SHA256
0a7f5c6dcd28bb596d799ca964b2abea06dbf3b72190735e16fc8fbb367b800f
-
SHA512
f02d148a5490a04cc5e5a14fa5e44f8434bf753728d966792ab192779fbde5c8127bdadfb392ed57ee15855ef62f7ef2487f418234aceeb4a227a83b47b7a9c3
-
SSDEEP
12288:YX0JnnOnNnTohRUP3GbXTYN23ezAjW0+j0U+f:lwNoR4WbDYN2OzOW0O0rf
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a7f5c6dcd28bb596d799ca964b2abea06dbf3b72190735e16fc8fbb367b800f.exe"C:\Users\Admin\AppData\Local\Temp\0a7f5c6dcd28bb596d799ca964b2abea06dbf3b72190735e16fc8fbb367b800f.exe"1⤵
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
428KB
-
Filesize
444KB
-
Filesize
28.8MB
-
Filesize
28.8MB
-
Filesize
1024KB
-
Filesize
428KB
-
Filesize
444KB