Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
6b293e85cf74e470d27f6eb26ffec0e941c8f047e466a7d909a3b740aa91496d
-
Size
935KB
-
Sample
221125-pdq5jaah31
-
MD5
eb052f81cb957cbbe6ceaa6d510b6cae
-
SHA1
8b0949ab1a2be9c8890f76d90602265f5a90f517
-
SHA256
6b293e85cf74e470d27f6eb26ffec0e941c8f047e466a7d909a3b740aa91496d
-
SHA512
5759867e3535f231d8895e7f634936c3b5f636c0f3113ad1572f11acf02179894acc02584ec956c2bda026a50933d3451893eeaf6d022bddb50c0cca4710e5bc
-
SSDEEP
12288:I5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4c:IyHv5Z+Wzv7AiBll0OBWi6si9Gd
Static task
static1
Behavioral task
behavioral1
Sample
6b293e85cf74e470d27f6eb26ffec0e941c8f047e466a7d909a3b740aa91496d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6b293e85cf74e470d27f6eb26ffec0e941c8f047e466a7d909a3b740aa91496d.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
6b293e85cf74e470d27f6eb26ffec0e941c8f047e466a7d909a3b740aa91496d
-
Size
935KB
-
MD5
eb052f81cb957cbbe6ceaa6d510b6cae
-
SHA1
8b0949ab1a2be9c8890f76d90602265f5a90f517
-
SHA256
6b293e85cf74e470d27f6eb26ffec0e941c8f047e466a7d909a3b740aa91496d
-
SHA512
5759867e3535f231d8895e7f634936c3b5f636c0f3113ad1572f11acf02179894acc02584ec956c2bda026a50933d3451893eeaf6d022bddb50c0cca4710e5bc
-
SSDEEP
12288:I5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4c:IyHv5Z+Wzv7AiBll0OBWi6si9Gd
Score8/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-