Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Badware.exe

  • Size

    6.6MB

  • Sample

    221003-vlt42sgaa8

  • MD5

    fb316f49281ab7de9fb838a9526800d6

  • SHA1

    9e10615d4dd5f40ab3eb4a47adedfd14b44bef1a

  • SHA256

    617df5e5e7720cc89db1598ac6d033857fb3ca1453146c221c6b97f2ef600528

  • SHA512

    a6c20d76ad2778f585821500c431de6241b1b251f6a923cc0883578a695a3974000c4d76acdc158c8e371844b3f2a7233cf9e0e6e5d1bfa8c2700e29f9bc4fc9

  • SSDEEP

    98304:+BbA9dwHlG3BEcledGY/KZZ+ioqjAtzFpLyK8tDmQz2RrG3Plkv1LTMS/LphYKUe:8gr3BZY/Nw+pLyfvV39OMS/L/

Score
8/10

Malware Config

Targets

    • Target

      Badware.exe

    • Size

      6.6MB

    • MD5

      fb316f49281ab7de9fb838a9526800d6

    • SHA1

      9e10615d4dd5f40ab3eb4a47adedfd14b44bef1a

    • SHA256

      617df5e5e7720cc89db1598ac6d033857fb3ca1453146c221c6b97f2ef600528

    • SHA512

      a6c20d76ad2778f585821500c431de6241b1b251f6a923cc0883578a695a3974000c4d76acdc158c8e371844b3f2a7233cf9e0e6e5d1bfa8c2700e29f9bc4fc9

    • SSDEEP

      98304:+BbA9dwHlG3BEcledGY/KZZ+ioqjAtzFpLyK8tDmQz2RrG3Plkv1LTMS/LphYKUe:8gr3BZY/Nw+pLyfvV39OMS/L/

    Score
    8/10
    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks