Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

20c24a1578...5c.dll

windows7-x64

9

20c24a1578...5c.dll

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20c24a15781710e9cf0121c5f36f335c

  • Size

    923KB

  • Sample

    231230-3ytm2sbaf6

  • MD5

    20c24a15781710e9cf0121c5f36f335c

  • SHA1

    4c47a3db81547e88085ba659c6b0093ac8215697

  • SHA256

    6eee307788aa153b5be96830edd1cf85aa180afb5b6d5d7ff2d56e50fd553ce3

  • SHA512

    37e55515f45d19ea09bf1d25c6100985bca8c18057c6779d29d2b336b454ca394dabc34f38ea691f4f02ef4cba38b595ed9ef19729fd974181fb7a8cad4a23b3

  • SSDEEP

    24576:d0A9AbAnfpp0HLYVUlPiSVyAuOidZca5l/0sA:d0A9VnfpeYVUNZyArYfn8N

Score
9/10
evasion

Malware Config

Targets

    • Target

      20c24a15781710e9cf0121c5f36f335c

    • Size

      923KB

    • MD5

      20c24a15781710e9cf0121c5f36f335c

    • SHA1

      4c47a3db81547e88085ba659c6b0093ac8215697

    • SHA256

      6eee307788aa153b5be96830edd1cf85aa180afb5b6d5d7ff2d56e50fd553ce3

    • SHA512

      37e55515f45d19ea09bf1d25c6100985bca8c18057c6779d29d2b336b454ca394dabc34f38ea691f4f02ef4cba38b595ed9ef19729fd974181fb7a8cad4a23b3

    • SSDEEP

      24576:d0A9AbAnfpp0HLYVUlPiSVyAuOidZca5l/0sA:d0A9VnfpeYVUNZyArYfn8N

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks