Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bb2d18cc2e0f840e562a30b57360c6f0a701475ba1ae783759f58117f269e537

  • Size

    1.8MB

  • Sample

    220916-s6tb5sgbd2

  • MD5

    f813d9cdf5016e184ade31151f810776

  • SHA1

    5f056a2b81e856aac5af16cd1bfe0b0ed33fafdf

  • SHA256

    bb2d18cc2e0f840e562a30b57360c6f0a701475ba1ae783759f58117f269e537

  • SHA512

    138aa91fe51abf40f3cfcfeaa948a955a6874494a43e828f45640af16aaf485eec99b8b034d589b602e2c9a98f7e1b0b46e01a692ef7a4747e218258c0bfc031

  • SSDEEP

    49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig

Score
9/10

Malware Config

Targets

    • Target

      bb2d18cc2e0f840e562a30b57360c6f0a701475ba1ae783759f58117f269e537

    • Size

      1.8MB

    • MD5

      f813d9cdf5016e184ade31151f810776

    • SHA1

      5f056a2b81e856aac5af16cd1bfe0b0ed33fafdf

    • SHA256

      bb2d18cc2e0f840e562a30b57360c6f0a701475ba1ae783759f58117f269e537

    • SHA512

      138aa91fe51abf40f3cfcfeaa948a955a6874494a43e828f45640af16aaf485eec99b8b034d589b602e2c9a98f7e1b0b46e01a692ef7a4747e218258c0bfc031

    • SSDEEP

      49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Executes dropped EXE

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks whether UAC is enabled

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v6

Tasks