Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    db950fa36906f1288253b90bb8eb722d5f29c1f078d043bf0f4b90ed7698614b

  • Size

    787KB

  • Sample

    221106-3cqdhahhdq

  • MD5

    0d18eae002c8d89fe777fffd15c82f70

  • SHA1

    88cf49d9fa4b0a0e7637b57d42b1695ca4d593ce

  • SHA256

    db950fa36906f1288253b90bb8eb722d5f29c1f078d043bf0f4b90ed7698614b

  • SHA512

    e92a05fb022bfa914552017b8f15b89c7ececc47159c52460027251d5120bf465e0591dee2124068999c819922b93500572625a32870b0b196915a0f2554dc8d

  • SSDEEP

    24576:zTh1pwLZFS86oag9BcgHFLiT1fjwGkuYHCDtq8:zTp2S83agXhlLI/fD

Score
9/10

Malware Config

Targets

    • Target

      db950fa36906f1288253b90bb8eb722d5f29c1f078d043bf0f4b90ed7698614b

    • Size

      787KB

    • MD5

      0d18eae002c8d89fe777fffd15c82f70

    • SHA1

      88cf49d9fa4b0a0e7637b57d42b1695ca4d593ce

    • SHA256

      db950fa36906f1288253b90bb8eb722d5f29c1f078d043bf0f4b90ed7698614b

    • SHA512

      e92a05fb022bfa914552017b8f15b89c7ececc47159c52460027251d5120bf465e0591dee2124068999c819922b93500572625a32870b0b196915a0f2554dc8d

    • SSDEEP

      24576:zTh1pwLZFS86oag9BcgHFLiT1fjwGkuYHCDtq8:zTp2S83agXhlLI/fD

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v6

Tasks