Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

a9a5fd55da...41.exe

windows7-x64

7

a9a5fd55da...41.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a9a5fd55da53435b30d4023e5225de2534ab3246a817f13d9432bb19fd963f41

  • Size

    781KB

  • Sample

    221202-2772csde29

  • MD5

    d48727b80839d610f8c36326c5229299

  • SHA1

    bfd1b0e9ca7a6c29f3442a87f2c34a42a427a8fa

  • SHA256

    a9a5fd55da53435b30d4023e5225de2534ab3246a817f13d9432bb19fd963f41

  • SHA512

    99c77479dfe848df6b1e90b5c01a8e1bacf6d830910cfef0d2cf1f27c7d58cbd39c39211d0750652e6a8d79c87bd2d6cf2d7b8e99b05b2d25aa23f80284ddd92

  • SSDEEP

    12288:V+tlzrOrzP9b3Mx0mWdBuVz/1jY1UHlPZOdDoXaIG8XNIUDLVZK37Au:ktlzrOrzV7y0mtz/1GDoaIG8XGsV/u

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      a9a5fd55da53435b30d4023e5225de2534ab3246a817f13d9432bb19fd963f41

    • Size

      781KB

    • MD5

      d48727b80839d610f8c36326c5229299

    • SHA1

      bfd1b0e9ca7a6c29f3442a87f2c34a42a427a8fa

    • SHA256

      a9a5fd55da53435b30d4023e5225de2534ab3246a817f13d9432bb19fd963f41

    • SHA512

      99c77479dfe848df6b1e90b5c01a8e1bacf6d830910cfef0d2cf1f27c7d58cbd39c39211d0750652e6a8d79c87bd2d6cf2d7b8e99b05b2d25aa23f80284ddd92

    • SSDEEP

      12288:V+tlzrOrzP9b3Mx0mWdBuVz/1jY1UHlPZOdDoXaIG8XNIUDLVZK37Au:ktlzrOrzV7y0mtz/1GDoaIG8XGsV/u

    Score
    7/10
    evasionthemida

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks