Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

Project Ab...ts.exe

windows7-x64

7

Project Ab...ts.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Project Abu Dhabi P2 approved Order - 10 Lots.exe

  • Size

    647KB

  • Sample

    231003-wpwbysee91

  • MD5

    287e9146727eaa39b1cb4c11e4d80b2c

  • SHA1

    0c45c9a1b8300943e938766bb8f5de7abc53a377

  • SHA256

    1cf360c97ea6bddb69594b1cbd4d3e7272a50ad258cc8d47fff0fff9836baf18

  • SHA512

    efd774550f7f4ece38fd47432bf753237435040e6f52dd011472c3e569292d94c090ac0399fb08baa7dd35e2cbacc7487ccbb80da56f73602a2610b8aaf473ab

  • SSDEEP

    12288:FuLXNdSTBky+ozlCuAsu9pIf6cZp4sVdOwEKeW1J1Hn:Fu7NdeT+ACLtS6wGsVLEKdN

Score
7/10

Malware Config

Targets

    • Target

      Project Abu Dhabi P2 approved Order - 10 Lots.exe

    • Size

      647KB

    • MD5

      287e9146727eaa39b1cb4c11e4d80b2c

    • SHA1

      0c45c9a1b8300943e938766bb8f5de7abc53a377

    • SHA256

      1cf360c97ea6bddb69594b1cbd4d3e7272a50ad258cc8d47fff0fff9836baf18

    • SHA512

      efd774550f7f4ece38fd47432bf753237435040e6f52dd011472c3e569292d94c090ac0399fb08baa7dd35e2cbacc7487ccbb80da56f73602a2610b8aaf473ab

    • SSDEEP

      12288:FuLXNdSTBky+ozlCuAsu9pIf6cZp4sVdOwEKeW1J1Hn:Fu7NdeT+ACLtS6wGsVLEKdN

    Score
    7/10

    • Checks QEMU agent file

      Checks presence of QEMU agent, possibly to detect virtualization.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks