Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
8c969750adf465c697d2364d28d82c7f7b152719b4127cb73c2e3d3097028bac
-
Size
2.4MB
-
Sample
221027-15nz2adhdj
-
MD5
17c487173dcd9cb69974e3043c635752
-
SHA1
55352258c60b7add65e6f6e9dd76e7eae226912d
-
SHA256
8c969750adf465c697d2364d28d82c7f7b152719b4127cb73c2e3d3097028bac
-
SHA512
30fc22a55eb9fbef0bbb11895bd3b8c2fb43866a55823ecb471bd2645722ee0386c5485cb45cb9fe3bcbbe4e25d325fce7ae39f43d59ef67b6e71bde3a174dcf
-
SSDEEP
49152:cpokTw0IhoxOnmDnUY8+mNkBgo9HBwoaNQvEHgCm1NStW0BtAZ:2i1cnI+muB9HYNQIJBm
Static task
static1
Behavioral task
behavioral1
Sample
8c969750adf465c697d2364d28d82c7f7b152719b4127cb73c2e3d3097028bac.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8c969750adf465c697d2364d28d82c7f7b152719b4127cb73c2e3d3097028bac.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
8c969750adf465c697d2364d28d82c7f7b152719b4127cb73c2e3d3097028bac
-
Size
2.4MB
-
MD5
17c487173dcd9cb69974e3043c635752
-
SHA1
55352258c60b7add65e6f6e9dd76e7eae226912d
-
SHA256
8c969750adf465c697d2364d28d82c7f7b152719b4127cb73c2e3d3097028bac
-
SHA512
30fc22a55eb9fbef0bbb11895bd3b8c2fb43866a55823ecb471bd2645722ee0386c5485cb45cb9fe3bcbbe4e25d325fce7ae39f43d59ef67b6e71bde3a174dcf
-
SSDEEP
49152:cpokTw0IhoxOnmDnUY8+mNkBgo9HBwoaNQvEHgCm1NStW0BtAZ:2i1cnI+muB9HYNQIJBm
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-