Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Project Abu Dhabi P2 approved Order - 10 Lots.exe
-
Size
647KB
-
Sample
231003-wpwbysee91
-
MD5
287e9146727eaa39b1cb4c11e4d80b2c
-
SHA1
0c45c9a1b8300943e938766bb8f5de7abc53a377
-
SHA256
1cf360c97ea6bddb69594b1cbd4d3e7272a50ad258cc8d47fff0fff9836baf18
-
SHA512
efd774550f7f4ece38fd47432bf753237435040e6f52dd011472c3e569292d94c090ac0399fb08baa7dd35e2cbacc7487ccbb80da56f73602a2610b8aaf473ab
-
SSDEEP
12288:FuLXNdSTBky+ozlCuAsu9pIf6cZp4sVdOwEKeW1J1Hn:Fu7NdeT+ACLtS6wGsVLEKdN
Static task
static1
Behavioral task
behavioral1
Sample
Project Abu Dhabi P2 approved Order - 10 Lots.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Project Abu Dhabi P2 approved Order - 10 Lots.exe
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
Project Abu Dhabi P2 approved Order - 10 Lots.exe
-
Size
647KB
-
MD5
287e9146727eaa39b1cb4c11e4d80b2c
-
SHA1
0c45c9a1b8300943e938766bb8f5de7abc53a377
-
SHA256
1cf360c97ea6bddb69594b1cbd4d3e7272a50ad258cc8d47fff0fff9836baf18
-
SHA512
efd774550f7f4ece38fd47432bf753237435040e6f52dd011472c3e569292d94c090ac0399fb08baa7dd35e2cbacc7487ccbb80da56f73602a2610b8aaf473ab
-
SSDEEP
12288:FuLXNdSTBky+ozlCuAsu9pIf6cZp4sVdOwEKeW1J1Hn:Fu7NdeT+ACLtS6wGsVLEKdN
Score7/10-
Checks QEMU agent file
Checks presence of QEMU agent, possibly to detect virtualization.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-