Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4d46b9a8b53b3621038c124d3389465f752af09c748607a87b24a33066524d7e
-
Size
1.8MB
-
Sample
221002-nvst1sfacl
-
MD5
347ec0e29a511cb707515978ae3cb052
-
SHA1
d1670765edae138e37f1093335815cac8e4703de
-
SHA256
4d46b9a8b53b3621038c124d3389465f752af09c748607a87b24a33066524d7e
-
SHA512
695ce575e85971bb754ea386ad33caee58af5af90ff050f6d6cbb408a007d3d5a5d921cfd29590e7fc5982ffbbfaffefafc5337213ea965d6ca6d52fe85e4272
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
Static task
static1
Malware Config
Targets
-
-
Target
4d46b9a8b53b3621038c124d3389465f752af09c748607a87b24a33066524d7e
-
Size
1.8MB
-
MD5
347ec0e29a511cb707515978ae3cb052
-
SHA1
d1670765edae138e37f1093335815cac8e4703de
-
SHA256
4d46b9a8b53b3621038c124d3389465f752af09c748607a87b24a33066524d7e
-
SHA512
695ce575e85971bb754ea386ad33caee58af5af90ff050f6d6cbb408a007d3d5a5d921cfd29590e7fc5982ffbbfaffefafc5337213ea965d6ca6d52fe85e4272
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-