Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ad48b9e67ee833bbd689924dcb513e474804c1ef9be6d04a77fc4d2f7d72e014
-
Size
4.2MB
-
Sample
221127-snytxabg2t
-
MD5
771c98cea71b5c6365ea2b835a0c1bcf
-
SHA1
1d20cef682dd7717f1baf550e2647eec0044e8b7
-
SHA256
ad48b9e67ee833bbd689924dcb513e474804c1ef9be6d04a77fc4d2f7d72e014
-
SHA512
cfe8d31c1988b3be31394c201d44e5aa2c5029c0fa703c512c35046a293ba5531917674f5a3bd3928f41c551edcea3c44438da07c848256333a66550beee84b3
-
SSDEEP
98304:5m38golHsrumEcwrG9bi21Z8XOfP5Jli7:C87HtmEcwriBn3rli
Static task
static1
Behavioral task
behavioral1
Sample
ad48b9e67ee833bbd689924dcb513e474804c1ef9be6d04a77fc4d2f7d72e014.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad48b9e67ee833bbd689924dcb513e474804c1ef9be6d04a77fc4d2f7d72e014.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
ad48b9e67ee833bbd689924dcb513e474804c1ef9be6d04a77fc4d2f7d72e014
-
Size
4.2MB
-
MD5
771c98cea71b5c6365ea2b835a0c1bcf
-
SHA1
1d20cef682dd7717f1baf550e2647eec0044e8b7
-
SHA256
ad48b9e67ee833bbd689924dcb513e474804c1ef9be6d04a77fc4d2f7d72e014
-
SHA512
cfe8d31c1988b3be31394c201d44e5aa2c5029c0fa703c512c35046a293ba5531917674f5a3bd3928f41c551edcea3c44438da07c848256333a66550beee84b3
-
SSDEEP
98304:5m38golHsrumEcwrG9bi21Z8XOfP5Jli7:C87HtmEcwriBn3rli
Score7/10-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Adds Run key to start application
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-