Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
362bebf2dd4a8eed72b424e60925b84c3c031111e00a596b325102b56e329290
-
Size
5.3MB
-
Sample
231008-pt7gfsed57
-
MD5
cbdc1728ec5ba5cb9eb1a0dfbcac326d
-
SHA1
cdfb3f71636b276224d61c918fc26f092af620b8
-
SHA256
362bebf2dd4a8eed72b424e60925b84c3c031111e00a596b325102b56e329290
-
SHA512
5908bcf5e3d5e17e0ec14c7d77ffe8095b087729e9716cda9e4af36206661fa2a3013cd7c80c74e56101256659f3d9eaf4770eb8110e4a0fc6e9cae2582cf900
-
SSDEEP
98304:BNV6NatCnwNsiB32bSiiIbzVhYGIfJygff226jPVi7ESfIbIa33mMH9:oaOrdVhYXfsgff226PV4i3
Static task
static1
Behavioral task
behavioral1
Sample
362bebf2dd4a8eed72b424e60925b84c3c031111e00a596b325102b56e329290.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
362bebf2dd4a8eed72b424e60925b84c3c031111e00a596b325102b56e329290.exe
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
362bebf2dd4a8eed72b424e60925b84c3c031111e00a596b325102b56e329290
-
Size
5.3MB
-
MD5
cbdc1728ec5ba5cb9eb1a0dfbcac326d
-
SHA1
cdfb3f71636b276224d61c918fc26f092af620b8
-
SHA256
362bebf2dd4a8eed72b424e60925b84c3c031111e00a596b325102b56e329290
-
SHA512
5908bcf5e3d5e17e0ec14c7d77ffe8095b087729e9716cda9e4af36206661fa2a3013cd7c80c74e56101256659f3d9eaf4770eb8110e4a0fc6e9cae2582cf900
-
SSDEEP
98304:BNV6NatCnwNsiB32bSiiIbzVhYGIfJygff226jPVi7ESfIbIa33mMH9:oaOrdVhYXfsgff226PV4i3
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-