Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1d75d032796f8757135e57fe429b352cea21a0dcfcba628c68b0c7a66998690c
-
Size
4.1MB
-
Sample
231011-wsqkwafe95
-
MD5
8f76cdcdd9932f09c01217a86bcaabc8
-
SHA1
0a3fffab6ebd4478d160d3f348411c867ade9681
-
SHA256
1d75d032796f8757135e57fe429b352cea21a0dcfcba628c68b0c7a66998690c
-
SHA512
ba84ddb7e637a41209cb8d8369126977b2ceb02c08419e4ecbbbe3cd7de908ba0c93d761ba12fe02e25776991a9792c9207729912d1099647f0e7a71d08d10aa
-
SSDEEP
49152:u5Zz7oUXlCOmc9WcK4Zeg4ysJjoW4ZcG3lwMrGccWEasIFKo8m/n/EwVR1ASsD18:qZz71Dmxg4cQJMrJ1E+KP2VRCIh
Static task
static1
Behavioral task
behavioral1
Sample
1d75d032796f8757135e57fe429b352cea21a0dcfcba628c68b0c7a66998690c.exe
Resource
win7-20230831-en
Malware Config
Targets
-
-
Target
1d75d032796f8757135e57fe429b352cea21a0dcfcba628c68b0c7a66998690c
-
Size
4.1MB
-
MD5
8f76cdcdd9932f09c01217a86bcaabc8
-
SHA1
0a3fffab6ebd4478d160d3f348411c867ade9681
-
SHA256
1d75d032796f8757135e57fe429b352cea21a0dcfcba628c68b0c7a66998690c
-
SHA512
ba84ddb7e637a41209cb8d8369126977b2ceb02c08419e4ecbbbe3cd7de908ba0c93d761ba12fe02e25776991a9792c9207729912d1099647f0e7a71d08d10aa
-
SSDEEP
49152:u5Zz7oUXlCOmc9WcK4Zeg4ysJjoW4ZcG3lwMrGccWEasIFKo8m/n/EwVR1ASsD18:qZz71Dmxg4cQJMrJ1E+KP2VRCIh
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-