Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
db950fa36906f1288253b90bb8eb722d5f29c1f078d043bf0f4b90ed7698614b
-
Size
787KB
-
Sample
221106-3cqdhahhdq
-
MD5
0d18eae002c8d89fe777fffd15c82f70
-
SHA1
88cf49d9fa4b0a0e7637b57d42b1695ca4d593ce
-
SHA256
db950fa36906f1288253b90bb8eb722d5f29c1f078d043bf0f4b90ed7698614b
-
SHA512
e92a05fb022bfa914552017b8f15b89c7ececc47159c52460027251d5120bf465e0591dee2124068999c819922b93500572625a32870b0b196915a0f2554dc8d
-
SSDEEP
24576:zTh1pwLZFS86oag9BcgHFLiT1fjwGkuYHCDtq8:zTp2S83agXhlLI/fD
Static task
static1
Behavioral task
behavioral1
Sample
db950fa36906f1288253b90bb8eb722d5f29c1f078d043bf0f4b90ed7698614b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db950fa36906f1288253b90bb8eb722d5f29c1f078d043bf0f4b90ed7698614b.dll
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
db950fa36906f1288253b90bb8eb722d5f29c1f078d043bf0f4b90ed7698614b
-
Size
787KB
-
MD5
0d18eae002c8d89fe777fffd15c82f70
-
SHA1
88cf49d9fa4b0a0e7637b57d42b1695ca4d593ce
-
SHA256
db950fa36906f1288253b90bb8eb722d5f29c1f078d043bf0f4b90ed7698614b
-
SHA512
e92a05fb022bfa914552017b8f15b89c7ececc47159c52460027251d5120bf465e0591dee2124068999c819922b93500572625a32870b0b196915a0f2554dc8d
-
SSDEEP
24576:zTh1pwLZFS86oag9BcgHFLiT1fjwGkuYHCDtq8:zTp2S83agXhlLI/fD
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-