Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
96e8cedac882753215bc7b3a604ae264732c9bb27281ab786f64eba36c7eac6a
-
Size
2.7MB
-
Sample
221124-kdcvpaec8y
-
MD5
0241f64e37ce54ae515dab9b5cf55819
-
SHA1
d85fbc255084e72986fa4a26892857dc7afed077
-
SHA256
96e8cedac882753215bc7b3a604ae264732c9bb27281ab786f64eba36c7eac6a
-
SHA512
95d482027c11d600ebacdab75124eb247073e9736c18d790359ba334bd41a817d98bf1924d93603ee105f683b938db87a8942fbdfd624ddd8228de74b44c1c26
-
SSDEEP
49152:zCe2mnTNlAj7ohElUAItsvel+PlxXneJ/oazioS78KOHHgiOOI:zCmTNXvAItsdlNeFVU78pHHgh
Behavioral task
behavioral1
Sample
96e8cedac882753215bc7b3a604ae264732c9bb27281ab786f64eba36c7eac6a.exe
Resource
win7-20221111-en
Malware Config
Targets
-
-
Target
96e8cedac882753215bc7b3a604ae264732c9bb27281ab786f64eba36c7eac6a
-
Size
2.7MB
-
MD5
0241f64e37ce54ae515dab9b5cf55819
-
SHA1
d85fbc255084e72986fa4a26892857dc7afed077
-
SHA256
96e8cedac882753215bc7b3a604ae264732c9bb27281ab786f64eba36c7eac6a
-
SHA512
95d482027c11d600ebacdab75124eb247073e9736c18d790359ba334bd41a817d98bf1924d93603ee105f683b938db87a8942fbdfd624ddd8228de74b44c1c26
-
SSDEEP
49152:zCe2mnTNlAj7ohElUAItsvel+PlxXneJ/oazioS78KOHHgiOOI:zCmTNXvAItsdlNeFVU78pHHgh
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-