Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    debab620af6eb05fd672e407b8d078fa3245a06fe0a55bef0dfbd8466c49aee3

  • Size

    1.3MB

  • Sample

    221003-zn4tgsfbaq

  • MD5

    34f10c9c63fcc57f79c0d01a32f492e0

  • SHA1

    2699980e525c6057e4ee581c24b3a35ad69fe053

  • SHA256

    debab620af6eb05fd672e407b8d078fa3245a06fe0a55bef0dfbd8466c49aee3

  • SHA512

    1cb74ca0a011b5ae6bb03cf313c433e45d4a6fbd2463c2279cf58a7d3c373084942372a5d7f0ea19b74ab65a71abe2489527502fdf3f6bd68d401470c36bd369

  • SSDEEP

    24576:dtMmNZzuJBTP5jsfqEgZwNJTAz3WI1BD9Vlw3M6o1ey1/tOKAzq:smbzCjn9qDAKI1Fl+Mh1eyltOKR

Score
9/10

Malware Config

Targets

    • Target

      debab620af6eb05fd672e407b8d078fa3245a06fe0a55bef0dfbd8466c49aee3

    • Size

      1.3MB

    • MD5

      34f10c9c63fcc57f79c0d01a32f492e0

    • SHA1

      2699980e525c6057e4ee581c24b3a35ad69fe053

    • SHA256

      debab620af6eb05fd672e407b8d078fa3245a06fe0a55bef0dfbd8466c49aee3

    • SHA512

      1cb74ca0a011b5ae6bb03cf313c433e45d4a6fbd2463c2279cf58a7d3c373084942372a5d7f0ea19b74ab65a71abe2489527502fdf3f6bd68d401470c36bd369

    • SSDEEP

      24576:dtMmNZzuJBTP5jsfqEgZwNJTAz3WI1BD9Vlw3M6o1ey1/tOKAzq:smbzCjn9qDAKI1Fl+Mh1eyltOKR

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v6

Tasks