Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

Client.exe

windows10-1703-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Client.exe

  • Size

    156KB

  • Sample

    231117-bh3ggacf98

  • MD5

    a0e75a2c85b92f57dacfc23abca49e13

  • SHA1

    7ac5d02431ba56e5409957e08f8ac0fff28dff5c

  • SHA256

    eca3ebb192d70aad680a4c202d6d894c2393f73f52f34e215f970eb280c132ca

  • SHA512

    0931d46dfb89fe09afbf3b61f0b53e8de26a4a6de6db5739e070cae105d5515e2ff9ed731d81c015bc7f0f4a0e0723249edab7f02e7289d267be710fd77982e2

  • SSDEEP

    3072:s2pPQ/UD9czWHsp10bEJrkv8nzDpw6EnERND6a9l3Wb1j+D:s2poMBLo1GEJrkH6EniJUb

Score
9/10
evasion

Malware Config

Targets

    • Target

      Client.exe

    • Size

      156KB

    • MD5

      a0e75a2c85b92f57dacfc23abca49e13

    • SHA1

      7ac5d02431ba56e5409957e08f8ac0fff28dff5c

    • SHA256

      eca3ebb192d70aad680a4c202d6d894c2393f73f52f34e215f970eb280c132ca

    • SHA512

      0931d46dfb89fe09afbf3b61f0b53e8de26a4a6de6db5739e070cae105d5515e2ff9ed731d81c015bc7f0f4a0e0723249edab7f02e7289d267be710fd77982e2

    • SSDEEP

      3072:s2pPQ/UD9czWHsp10bEJrkv8nzDpw6EnERND6a9l3Wb1j+D:s2poMBLo1GEJrkH6EniJUb

    Score
    9/10
    evasion

    • Looks for VirtualBox Guest Additions in registry

      evasion

    • Looks for VMWare Tools registry key

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks