Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

79598a04f1...1c.exe

windows7-x64

6

79598a04f1...1c.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    79598a04f1fba4a475535f5693123d3ad884dda098deb64002e3158b3090331c

  • Size

    2.4MB

  • Sample

    240909-tx6rjszfna

  • MD5

    e50ca1b8e0703ed90cef988084d8b0f5

  • SHA1

    9e645af30750e97d24867b0cda97dc9440fe232f

  • SHA256

    79598a04f1fba4a475535f5693123d3ad884dda098deb64002e3158b3090331c

  • SHA512

    c91fee1475024ebb9638f99fade160cc2841a6d1f9586e0f4609040f22955920481671cc0a939b6089325dedd47929328a98074db29ff504b39241ed89cfe608

  • SSDEEP

    49152:JoNgRf9tTkvqHWzKVcBd6o6nt2rK09G4lyo0ZacSiLUswRI/CIJr:J+Qf7cqA0bt2rK09cohiLUbQJJr

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      79598a04f1fba4a475535f5693123d3ad884dda098deb64002e3158b3090331c

    • Size

      2.4MB

    • MD5

      e50ca1b8e0703ed90cef988084d8b0f5

    • SHA1

      9e645af30750e97d24867b0cda97dc9440fe232f

    • SHA256

      79598a04f1fba4a475535f5693123d3ad884dda098deb64002e3158b3090331c

    • SHA512

      c91fee1475024ebb9638f99fade160cc2841a6d1f9586e0f4609040f22955920481671cc0a939b6089325dedd47929328a98074db29ff504b39241ed89cfe608

    • SSDEEP

      49152:JoNgRf9tTkvqHWzKVcBd6o6nt2rK09G4lyo0ZacSiLUswRI/CIJr:J+Qf7cqA0bt2rK09cohiLUbQJJr

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks