Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b76e68efec4b416dfcb61ec2fe4cb4d7cf0dec0e5d4b636d612f7e3088e5aaf7
-
Size
1.1MB
-
Sample
221201-jrdtgagh26
-
MD5
1908d26d16017b07b136cd75b14c852d
-
SHA1
3947d2efe14baab4f6fa0a35247ea67cb48d6d3b
-
SHA256
b76e68efec4b416dfcb61ec2fe4cb4d7cf0dec0e5d4b636d612f7e3088e5aaf7
-
SHA512
1bc40fa007028b8cf096153cb4e47dda170c89e03d3781d9295aa771d0a6ac4d06414d6903eff0c135f6aa5d20fb1b4e2e6f569feae52689b8e3d96e231fb757
-
SSDEEP
24576:rlY/mVuLnAmw8/2HJM5knFvAgqkeInMc7dUbjpuh5KYNEZuZh:ry/mM1lUJM5w7rKIgMEa
Static task
static1
Behavioral task
behavioral1
Sample
b76e68efec4b416dfcb61ec2fe4cb4d7cf0dec0e5d4b636d612f7e3088e5aaf7.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b76e68efec4b416dfcb61ec2fe4cb4d7cf0dec0e5d4b636d612f7e3088e5aaf7.dll
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
b76e68efec4b416dfcb61ec2fe4cb4d7cf0dec0e5d4b636d612f7e3088e5aaf7
-
Size
1.1MB
-
MD5
1908d26d16017b07b136cd75b14c852d
-
SHA1
3947d2efe14baab4f6fa0a35247ea67cb48d6d3b
-
SHA256
b76e68efec4b416dfcb61ec2fe4cb4d7cf0dec0e5d4b636d612f7e3088e5aaf7
-
SHA512
1bc40fa007028b8cf096153cb4e47dda170c89e03d3781d9295aa771d0a6ac4d06414d6903eff0c135f6aa5d20fb1b4e2e6f569feae52689b8e3d96e231fb757
-
SSDEEP
24576:rlY/mVuLnAmw8/2HJM5knFvAgqkeInMc7dUbjpuh5KYNEZuZh:ry/mM1lUJM5w7rKIgMEa
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-