Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
00e011843c0694ebe320047751953250
-
Size
605KB
-
Sample
231229-xex88sdcaj
-
MD5
00e011843c0694ebe320047751953250
-
SHA1
d59a0e6ef4d3b4cc05543c413f9e29e1af15642d
-
SHA256
5243721414d8a6298391dcd942ee38b13cab197514390b270e200e64544bdaf8
-
SHA512
4e112ff071ff094d9167d809ac814eba53c3ff50434ca55e833cc6f94be24cc01f44d537a51dbe89b1c81237be29881d7de8bf2e8f4d7160c867edf9d14205c7
-
SSDEEP
12288:yVKKH8dKRCpE4qFgn0azf1BPG10NboQjRi21PG7sOBDhDQo96S:GH8Kp4qun0ajrNBU21PpOrD3QS
Behavioral task
behavioral1
Sample
00e011843c0694ebe320047751953250.exe
Resource
win7-20231215-en
Malware Config
Targets
-
-
Target
00e011843c0694ebe320047751953250
-
Size
605KB
-
MD5
00e011843c0694ebe320047751953250
-
SHA1
d59a0e6ef4d3b4cc05543c413f9e29e1af15642d
-
SHA256
5243721414d8a6298391dcd942ee38b13cab197514390b270e200e64544bdaf8
-
SHA512
4e112ff071ff094d9167d809ac814eba53c3ff50434ca55e833cc6f94be24cc01f44d537a51dbe89b1c81237be29881d7de8bf2e8f4d7160c867edf9d14205c7
-
SSDEEP
12288:yVKKH8dKRCpE4qFgn0azf1BPG10NboQjRi21PG7sOBDhDQo96S:GH8Kp4qun0ajrNBU21PpOrD3QS
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-