Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ww.zip
-
Size
1.3MB
-
Sample
230503-j2jgpsea39
-
MD5
e7f287234c27ee1723cace6ba8f49b48
-
SHA1
542a4582ae4a559bba1da1c79404a7e40f221bc7
-
SHA256
aaec8fd3535100dea07e3ec150896f7d046b58abf9be50328f118f58f2a2befb
-
SHA512
c5e2f888bbdad9360266d3a000d7f8a0b78d1b85a86933514fc15229470542a44a685ad361bf81e47c857e11b063aba5db9dc97879cb53b3f78d3c7935fddce1
-
SSDEEP
24576:h4pDDWryjFVZVbCb0j4QSLIn8+egjyYR/Yf45qvAu:hO/r2u4lLc8/g2QYZvAu
Static task
static1
Behavioral task
behavioral1
Sample
ww.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ww.zip
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
ww.zip
-
Size
1.3MB
-
MD5
e7f287234c27ee1723cace6ba8f49b48
-
SHA1
542a4582ae4a559bba1da1c79404a7e40f221bc7
-
SHA256
aaec8fd3535100dea07e3ec150896f7d046b58abf9be50328f118f58f2a2befb
-
SHA512
c5e2f888bbdad9360266d3a000d7f8a0b78d1b85a86933514fc15229470542a44a685ad361bf81e47c857e11b063aba5db9dc97879cb53b3f78d3c7935fddce1
-
SSDEEP
24576:h4pDDWryjFVZVbCb0j4QSLIn8+egjyYR/Yf45qvAu:hO/r2u4lLc8/g2QYZvAu
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-