Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
31/12/2023, 15:51
General
-
Target
3a63db4b9f17c91468a4c64e04d558b8.exe
-
Size
3.9MB
-
MD5
3a63db4b9f17c91468a4c64e04d558b8
-
SHA1
c1f9fd82c2480679161dc98781c4182da899acb4
-
SHA256
dc0021441e822680364e1ebb39c1793bcfb60ef07b21c6bceb22cb8c621eb353
-
SHA512
20041dff9b2fe5ad687183d40290fb695666fccb29f86c9b1048cd0b643fffd34be5a312f15bd29aafa799f515163003077b1591a57fc0335cb02234b4cd40ad
-
SSDEEP
98304:J7nQIKsmjebdvQvhi2q1P4HUWmOt42cjQl/7NQGulP:J7nKDwKi2aS1O2cMB6
Score
7/10
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 15 IoCs
Detects Themida, an advanced Windows software protection system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3a63db4b9f17c91468a4c64e04d558b8.exe"C:\Users\Admin\AppData\Local\Temp\3a63db4b9f17c91468a4c64e04d558b8.exe"1⤵
- Identifies Wine through registry keys
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12.6MB
-
Filesize
12.6MB
-
Filesize
12.6MB
-
Filesize
12.6MB
-
Filesize
12.6MB
-
Filesize
12.6MB
-
Filesize
12.6MB
-
Filesize
12.6MB
-
Filesize
12.6MB
-
Filesize
12.6MB
-
Filesize
12.6MB
-
Filesize
12.6MB
-
Filesize
12.6MB
-
Filesize
12.6MB
-
Filesize
12.6MB