Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    32s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    03/12/2022, 14:35 UTC

General

  • Target

    c6e613a5cafa9b93618b8a242a4930206d7ffd60727f74383b7bd86f6b67f967.exe

  • Size

    1.6MB

  • MD5

    4e1dd5fe0094f30604b0206694fcf930

  • SHA1

    3835ee6c26b661960a02893fb2530b7ac70a50e3

  • SHA256

    c6e613a5cafa9b93618b8a242a4930206d7ffd60727f74383b7bd86f6b67f967

  • SHA512

    2f813154439244f2379575560fd17107c900fc27772137298e5f1146976b4789341ceb07936ba70b23093cca016c6be52d82a993d964fcc01dc6a9333053a02d

  • SSDEEP

    24576:GZEWbhrozmD9MbOksXh+UT0lMvh4KukGh6xsq/Hris6ztxr4q3ctfSOZS:WEWb1Tbkg0G1t2satxEq3kfnS

Score
9/10

Malware Config

Signatures

  • Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
  • Checks BIOS information in registry 2 TTPs 1 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Identifies Wine through registry keys 2 TTPs 1 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

Processes

  • C:\Users\Admin\AppData\Local\Temp\c6e613a5cafa9b93618b8a242a4930206d7ffd60727f74383b7bd86f6b67f967.exe
    "C:\Users\Admin\AppData\Local\Temp\c6e613a5cafa9b93618b8a242a4930206d7ffd60727f74383b7bd86f6b67f967.exe"
    1⤵
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)
    • Checks BIOS information in registry
    • Identifies Wine through registry keys
    PID:536

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/536-54-0x0000000000400000-0x000000000059C000-memory.dmp

    Filesize

    1.6MB

  • memory/536-55-0x0000000000400000-0x000000000059C000-memory.dmp

    Filesize

    1.6MB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.