Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

client.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    client.exe

  • Size

    4.1MB

  • Sample

    240201-n5p6waegem

  • MD5

    e186f33b25f3cfcb91836a407f5c39b4

  • SHA1

    22bf66b4682a2100dafe1665410061899c2ad829

  • SHA256

    fad52a7cf65a9c2af091815e20bca29bd798b55cf92ef1c35c75be110ac71fce

  • SHA512

    6aefb19ecc26e66d1734a3b2916d45a6fb922b941db9f75696bb2263cd6f168549ad81df7300b03f19a453e1df155f3b024d8f38ad463d768017fccc4de68fdd

  • SSDEEP

    98304:n1wxDTIoVs1wZbkd1q4iVJ1JaOprgqAN8Rkk+v:aIoVMUbkfq4ejpH9RWv

Score
9/10
evasionthemidatrojan

Malware Config

Targets

    • Target

      client.exe

    • Size

      4.1MB

    • MD5

      e186f33b25f3cfcb91836a407f5c39b4

    • SHA1

      22bf66b4682a2100dafe1665410061899c2ad829

    • SHA256

      fad52a7cf65a9c2af091815e20bca29bd798b55cf92ef1c35c75be110ac71fce

    • SHA512

      6aefb19ecc26e66d1734a3b2916d45a6fb922b941db9f75696bb2263cd6f168549ad81df7300b03f19a453e1df155f3b024d8f38ad463d768017fccc4de68fdd

    • SSDEEP

      98304:n1wxDTIoVs1wZbkd1q4iVJ1JaOprgqAN8Rkk+v:aIoVMUbkfq4ejpH9RWv

    Score
    9/10
    evasionthemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks