Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

4fb7b4638c...d8.exe

windows7-x64

7

4fb7b4638c...d8.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4fb7b4638c7339017fea94f19f0fb4d8

  • Size

    1.3MB

  • Sample

    240110-f9f5rsfgg6

  • MD5

    4fb7b4638c7339017fea94f19f0fb4d8

  • SHA1

    fdaf4ea4112c0739b7bab55b3a5258918a739cd8

  • SHA256

    95f7a1337f9f8d3c1fe306a14920e1c045c52cd91152a8e457ac264fdfe69dd3

  • SHA512

    0c931963b1e049c73283b13167480034b48bb3d78cbb2fb3edc409a35a82d15b25fbadc32f5f3cdda59a13de257aa9149a07fff70700dbd3b291b5834073f6b7

  • SSDEEP

    24576:7CSTSXo9EgkiIQheJ8JnnKzAmXC5bzgi/yBianG2iMtTu8ucR+2ePTs11zVntLF:7CSTeYBkizQnczgi/eVGetx/R+2ePwp

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      4fb7b4638c7339017fea94f19f0fb4d8

    • Size

      1.3MB

    • MD5

      4fb7b4638c7339017fea94f19f0fb4d8

    • SHA1

      fdaf4ea4112c0739b7bab55b3a5258918a739cd8

    • SHA256

      95f7a1337f9f8d3c1fe306a14920e1c045c52cd91152a8e457ac264fdfe69dd3

    • SHA512

      0c931963b1e049c73283b13167480034b48bb3d78cbb2fb3edc409a35a82d15b25fbadc32f5f3cdda59a13de257aa9149a07fff70700dbd3b291b5834073f6b7

    • SSDEEP

      24576:7CSTSXo9EgkiIQheJ8JnnKzAmXC5bzgi/yBianG2iMtTu8ucR+2ePTs11zVntLF:7CSTeYBkizQnczgi/eVGetx/R+2ePwp

    Score
    7/10
    evasionthemida

    • Executes dropped EXE

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Loads dropped DLL

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks