Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1acf5dd5fa23db1a5ce178c4293b2502
-
Size
763KB
-
Sample
231224-3vwcgafbgp
-
MD5
1acf5dd5fa23db1a5ce178c4293b2502
-
SHA1
7ca440c1330bd7e044b8682351083d1e114daeb4
-
SHA256
589589cf055092ff339d001f2a39ac59d63625d1fc1d622309589ce8f0ecff73
-
SHA512
2c0098221d2585444353512f3f61616ada676243c6778dbe3f3a0aa0b5cc6c9efd3074578883085368366b8606e0e63549da31d8e57415fa3e5d25fc7ab494b7
-
SSDEEP
12288:eyLz92qCy8r716AhZa1fVAYU5klrtr5eRaKFSfAXi6++o7tlw7YSLAqk+:zDCy8v16AhA1Q5kJeRaWvd+Hlw4+
Static task
static1
Behavioral task
behavioral1
Sample
WinLockDLL.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
WinLockDLL.dll
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
WinLockDLL.dll
-
Size
774KB
-
MD5
6a62956f8d972bacbf8bf5548b24933c
-
SHA1
6a375a05e4a39d20da7d27a0b872753cac8c9bf8
-
SHA256
94e3dddf77fe2913f782afc87ef62bd1bbd852df7e1b4939e97878daac5c3f81
-
SHA512
09c96072bb3da7c78e5cae52218a95761f0be7e6561c5c5326b0f817a3c1cd8295a42c1ce593b6bf140db544f3890d0783f0fdb0f2b8bfc3506c8304967a914e
-
SSDEEP
12288:/EppL1elLrNXpTD0on/ULFO5U52BK+mTUR9jRnzPcbolO71mFZtzfw:/EDL1cXVxMLFOs2BK1IDRDmJ7EtzI
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-