Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

loader.exe

windows10-1703-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    loader.exe

  • Size

    9.2MB

  • Sample

    230604-qata6ach5v

  • MD5

    1a2909a1b777484531a1871f22629143

  • SHA1

    e2f792d90fd3fce5f48a916d45013ebcc58071b9

  • SHA256

    07ea7f5fe652166f661cab9f6339b8dbe8c3d43944a75dea8a944d8c0d5118ae

  • SHA512

    72e471fb93a3ee8d6529d67849ff4eb8197d89ff3f5327d0b240a97f87d45a0f554dc114cb81f8d0a994594d4b153a27b69cb788fd874fd58d51f8e16983d529

  • SSDEEP

    196608:Q6ayQyLW3tOhirKqtFqgle+mMONDERm3qujPB827ea7YCR9PQqG:QXyQLOhiWife+mlwsnC2as9dG

Score
9/10
evasionthemidatrojan

Malware Config

Targets

    • Target

      loader.exe

    • Size

      9.2MB

    • MD5

      1a2909a1b777484531a1871f22629143

    • SHA1

      e2f792d90fd3fce5f48a916d45013ebcc58071b9

    • SHA256

      07ea7f5fe652166f661cab9f6339b8dbe8c3d43944a75dea8a944d8c0d5118ae

    • SHA512

      72e471fb93a3ee8d6529d67849ff4eb8197d89ff3f5327d0b240a97f87d45a0f554dc114cb81f8d0a994594d4b153a27b69cb788fd874fd58d51f8e16983d529

    • SSDEEP

      196608:Q6ayQyLW3tOhirKqtFqgle+mMONDERm3qujPB827ea7YCR9PQqG:QXyQLOhiWife+mlwsnC2as9dG

    Score
    9/10
    evasionthemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks