Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
31/12/2023, 01:22
General
-
Target
cb5881d774e317c33dc565c487a4c90c528e2bc0b44449e42cdb8698607a17e3.exe
-
Size
5.1MB
-
MD5
5fff0709172509f29c34878d8fecd346
-
SHA1
68c70307ac1182d7c9711c35574a8330def881c0
-
SHA256
cb5881d774e317c33dc565c487a4c90c528e2bc0b44449e42cdb8698607a17e3
-
SHA512
3a3495769b9ad0f1d25f73d4317cd4e57b8ce8386f129015b495a1a918690e3aed6cfe5f5aa645b7216e5dcf2a733de8d09957532d1127da468bbd831819afeb
-
SSDEEP
98304:WsZhPs5DXd8UqpNl92eV3VGehLVH/coFZKAJay8sqFRz4j1Jqh9PJ8nrOW:WeqlSUqpNj2YL50wZKaaBz43Y9PuR
Score
9/10
Malware Config
Signatures
-
Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Themida packer 9 IoCs
Detects Themida, an advanced Windows software protection system.
-
Checks whether UAC is enabled 1 TTPs 1 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cb5881d774e317c33dc565c487a4c90c528e2bc0b44449e42cdb8698607a17e3.exe"C:\Users\Admin\AppData\Local\Temp\cb5881d774e317c33dc565c487a4c90c528e2bc0b44449e42cdb8698607a17e3.exe"1⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Checks whether UAC is enabled
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13.2MB
-
Filesize
1.7MB
-
Filesize
13.2MB
-
Filesize
13.2MB
-
Filesize
13.2MB
-
Filesize
13.2MB
-
Filesize
13.2MB
-
Filesize
13.2MB
-
Filesize
13.2MB
-
Filesize
13.2MB
-
Filesize
1.7MB