Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
28/02/2024, 19:37
Behavioral task
behavioral1
Sample
acaef7a4ed87dc90ff181955ea7a2bbf.exe
Resource
win7-20240221-en
11 signatures
150 seconds
General
-
Target
acaef7a4ed87dc90ff181955ea7a2bbf.exe
-
Size
1.4MB
-
MD5
acaef7a4ed87dc90ff181955ea7a2bbf
-
SHA1
e0292a9243be088f673b151ddb9d81d34ed50c1e
-
SHA256
555279cf7c7064b32bd5595f490702dba5c5aec6a0b58db22410880ad42b7106
-
SHA512
b1383930888c5effe283617964cfad0753619863e3a9865c174a3dcaabf8e224fdf1ab6d69d7c3d41b2ebfc9d4fa8e2d8c15f10b68cd13a2bff3e0a4e7721536
-
SSDEEP
24576:slbRUyb2oyZ1rdHgCu4oK1I+zZMZaPKLQXuXujAnO6eWe0LjlEQfARoac:UUybE3RHgCud+I++p8XuXJq8l9Fac
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
description ioc Process Key opened \REGISTRY\USER\S-1-5-21-983155329-280873152-1838004294-1000\Software\Wine acaef7a4ed87dc90ff181955ea7a2bbf.exe -
resource yara_rule behavioral2/memory/228-0-0x0000000000400000-0x00000000007BB000-memory.dmp themida behavioral2/memory/228-3-0x0000000000400000-0x00000000007BB000-memory.dmp themida