Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

mqrKShBvko.exe

windows7-x64

9

mqrKShBvko.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mqrKShBvko.exe

  • Size

    11.2MB

  • Sample

    231231-p4lbzaehg7

  • MD5

    cdc7fd69069b2ad98d2b33a633eaf98b

  • SHA1

    b69fc19b195cd2d11416cddb675c79921817af6d

  • SHA256

    2971daa775ebab4f40852e097af9421be3dc46d271d2ce06f0daba6893dfe0f3

  • SHA512

    03a241e6b5d157f82e92bdd9611a7ba62d5a8c03a12831d9c684b76cab58b3dec17b6b542de09b73c63594f4f770d25acec7d06a586e284b50af411c7def81b6

  • SSDEEP

    196608:7p4QZqMFGkcNYuwPZ/bpo6kxYKURFqIhmdL1qo:7TtGt0zcmKURFq2m

Score
9/10
evasionthemidatrojan

Malware Config

Targets

    • Target

      mqrKShBvko.exe

    • Size

      11.2MB

    • MD5

      cdc7fd69069b2ad98d2b33a633eaf98b

    • SHA1

      b69fc19b195cd2d11416cddb675c79921817af6d

    • SHA256

      2971daa775ebab4f40852e097af9421be3dc46d271d2ce06f0daba6893dfe0f3

    • SHA512

      03a241e6b5d157f82e92bdd9611a7ba62d5a8c03a12831d9c684b76cab58b3dec17b6b542de09b73c63594f4f770d25acec7d06a586e284b50af411c7def81b6

    • SSDEEP

      196608:7p4QZqMFGkcNYuwPZ/bpo6kxYKURFqIhmdL1qo:7TtGt0zcmKURFq2m

    Score
    9/10
    evasionthemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks