Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0a4c652f8dfda227b5d876b3da65bd63dad8ee465596dd2f9b37596ac52de3df
-
Size
4.3MB
-
Sample
231211-tdmjkacff2
-
MD5
12e8f2fd15dd0d20d17f698e89f3fb0c
-
SHA1
9af9c94dd2e4c9e072a350e40c37c8b54f07a371
-
SHA256
0a4c652f8dfda227b5d876b3da65bd63dad8ee465596dd2f9b37596ac52de3df
-
SHA512
bcfd77e3ca6ebca4f14745872c0e0b52e863709be01bfbb1f2cb7be258ebeb504de4414489760047b84ce384c73957a8ad01eb67300b5c4651b9e960241b875f
-
SSDEEP
98304:reEva372q3gPw6L4O49HmFuwOrEhch54MMQkDUDR4Al7Fcf:rNo3/rNmgzrEhcJMQk24Ahq
Static task
static1
Behavioral task
behavioral1
Sample
0a4c652f8dfda227b5d876b3da65bd63dad8ee465596dd2f9b37596ac52de3df.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0a4c652f8dfda227b5d876b3da65bd63dad8ee465596dd2f9b37596ac52de3df.exe
Resource
win10v2004-20231127-en
Malware Config
Targets
-
-
Target
0a4c652f8dfda227b5d876b3da65bd63dad8ee465596dd2f9b37596ac52de3df
-
Size
4.3MB
-
MD5
12e8f2fd15dd0d20d17f698e89f3fb0c
-
SHA1
9af9c94dd2e4c9e072a350e40c37c8b54f07a371
-
SHA256
0a4c652f8dfda227b5d876b3da65bd63dad8ee465596dd2f9b37596ac52de3df
-
SHA512
bcfd77e3ca6ebca4f14745872c0e0b52e863709be01bfbb1f2cb7be258ebeb504de4414489760047b84ce384c73957a8ad01eb67300b5c4651b9e960241b875f
-
SSDEEP
98304:reEva372q3gPw6L4O49HmFuwOrEhch54MMQkDUDR4Al7Fcf:rNo3/rNmgzrEhcJMQk24Ahq
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-