Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d316a804ad0a69b7cf7ce86e7327c09e078e163fc837455d0f38e64bad7cd71f
-
Size
1.8MB
-
Sample
220919-zkdswsghh9
-
MD5
391558a7785d17f26dc29345caf77c55
-
SHA1
41c61bc96d35e67bb60900ddf46f95794741ccdf
-
SHA256
d316a804ad0a69b7cf7ce86e7327c09e078e163fc837455d0f38e64bad7cd71f
-
SHA512
96d3f93b98c36947a8e5a15bc48c2fccac073e4e1510752fcdb624da7f66fdb913c3e160abda1d081dc5f72ea65bb3d57b01bcaa1d35d6c4a34386d65e3fac7a
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
Static task
static1
Malware Config
Targets
-
-
Target
d316a804ad0a69b7cf7ce86e7327c09e078e163fc837455d0f38e64bad7cd71f
-
Size
1.8MB
-
MD5
391558a7785d17f26dc29345caf77c55
-
SHA1
41c61bc96d35e67bb60900ddf46f95794741ccdf
-
SHA256
d316a804ad0a69b7cf7ce86e7327c09e078e163fc837455d0f38e64bad7cd71f
-
SHA512
96d3f93b98c36947a8e5a15bc48c2fccac073e4e1510752fcdb624da7f66fdb913c3e160abda1d081dc5f72ea65bb3d57b01bcaa1d35d6c4a34386d65e3fac7a
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-