Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

WinLockDLL.dll

windows7-x64

9

WinLockDLL.dll

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1acf5dd5fa23db1a5ce178c4293b2502

  • Size

    763KB

  • Sample

    231224-3vwcgafbgp

  • MD5

    1acf5dd5fa23db1a5ce178c4293b2502

  • SHA1

    7ca440c1330bd7e044b8682351083d1e114daeb4

  • SHA256

    589589cf055092ff339d001f2a39ac59d63625d1fc1d622309589ce8f0ecff73

  • SHA512

    2c0098221d2585444353512f3f61616ada676243c6778dbe3f3a0aa0b5cc6c9efd3074578883085368366b8606e0e63549da31d8e57415fa3e5d25fc7ab494b7

  • SSDEEP

    12288:eyLz92qCy8r716AhZa1fVAYU5klrtr5eRaKFSfAXi6++o7tlw7YSLAqk+:zDCy8v16AhA1Q5kJeRaWvd+Hlw4+

Score
9/10
evasion

Malware Config

Targets

    • Target

      WinLockDLL.dll

    • Size

      774KB

    • MD5

      6a62956f8d972bacbf8bf5548b24933c

    • SHA1

      6a375a05e4a39d20da7d27a0b872753cac8c9bf8

    • SHA256

      94e3dddf77fe2913f782afc87ef62bd1bbd852df7e1b4939e97878daac5c3f81

    • SHA512

      09c96072bb3da7c78e5cae52218a95761f0be7e6561c5c5326b0f817a3c1cd8295a42c1ce593b6bf140db544f3890d0783f0fdb0f2b8bfc3506c8304967a914e

    • SSDEEP

      12288:/EppL1elLrNXpTD0on/ULFO5U52BK+mTUR9jRnzPcbolO71mFZtzfw:/EDL1cXVxMLFOs2BK1IDRDmJ7EtzI

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks