Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
loader.exe
-
Size
9.2MB
-
Sample
230604-qata6ach5v
-
MD5
1a2909a1b777484531a1871f22629143
-
SHA1
e2f792d90fd3fce5f48a916d45013ebcc58071b9
-
SHA256
07ea7f5fe652166f661cab9f6339b8dbe8c3d43944a75dea8a944d8c0d5118ae
-
SHA512
72e471fb93a3ee8d6529d67849ff4eb8197d89ff3f5327d0b240a97f87d45a0f554dc114cb81f8d0a994594d4b153a27b69cb788fd874fd58d51f8e16983d529
-
SSDEEP
196608:Q6ayQyLW3tOhirKqtFqgle+mMONDERm3qujPB827ea7YCR9PQqG:QXyQLOhiWife+mlwsnC2as9dG
Malware Config
Targets
-
-
Target
loader.exe
-
Size
9.2MB
-
MD5
1a2909a1b777484531a1871f22629143
-
SHA1
e2f792d90fd3fce5f48a916d45013ebcc58071b9
-
SHA256
07ea7f5fe652166f661cab9f6339b8dbe8c3d43944a75dea8a944d8c0d5118ae
-
SHA512
72e471fb93a3ee8d6529d67849ff4eb8197d89ff3f5327d0b240a97f87d45a0f554dc114cb81f8d0a994594d4b153a27b69cb788fd874fd58d51f8e16983d529
-
SSDEEP
196608:Q6ayQyLW3tOhirKqtFqgle+mMONDERm3qujPB827ea7YCR9PQqG:QXyQLOhiWife+mlwsnC2as9dG
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-