Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

7b2e416a03...0N.exe

windows7-x64

6

7b2e416a03...0N.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b2e416a031a849efe70bb56bfe9d290N.exe

  • Size

    4.7MB

  • Sample

    240805-l4xhfsxaqf

  • MD5

    7b2e416a031a849efe70bb56bfe9d290

  • SHA1

    c9cfe316dcdd4a8d4095142d3dbf32c890e70c39

  • SHA256

    b35242af26ca06fe09c946c9b453a4e0962ebdbfcb9684f57fd9bcd0a6d086f1

  • SHA512

    49a64a842e30e192006d3e09102a7730e61e58d02a7dfdb74239994460f3fc7d0c077f39e6ccc7db5b3fc0da5144beb2c9e83fbf5cd298e3d38e492508d5bbd6

  • SSDEEP

    98304:tJPJNAuwFdpwQ2LlL8Aw2N5TsryyVCiZD7CzsdB:t1JNsdQR8u5sGyciZD7CAB

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      7b2e416a031a849efe70bb56bfe9d290N.exe

    • Size

      4.7MB

    • MD5

      7b2e416a031a849efe70bb56bfe9d290

    • SHA1

      c9cfe316dcdd4a8d4095142d3dbf32c890e70c39

    • SHA256

      b35242af26ca06fe09c946c9b453a4e0962ebdbfcb9684f57fd9bcd0a6d086f1

    • SHA512

      49a64a842e30e192006d3e09102a7730e61e58d02a7dfdb74239994460f3fc7d0c077f39e6ccc7db5b3fc0da5144beb2c9e83fbf5cd298e3d38e492508d5bbd6

    • SSDEEP

      98304:tJPJNAuwFdpwQ2LlL8Aw2N5TsryyVCiZD7CzsdB:t1JNsdQR8u5sGyciZD7CAB

    Score
    6/10
    bootkitdiscoverypersistence

    • Legitimate hosting services abused for malware hosting/C2

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks