Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Verse V4.15.exe
-
Size
30.0MB
-
Sample
240309-vg68tadd3v
-
MD5
15ee2efb6fe685d6d5217c58c33d98e2
-
SHA1
4a6b8fcb5c21621a81c35cd367e186985044408c
-
SHA256
336c6f0d9de3de21f971c92e2239dac504580b4259602f9d602d0c4d7a2dacce
-
SHA512
23f0b7cd6b1412bd1a97910efd0462e3078139fafe3cc857d0969fb432448d85b65273822bee6daee8903394230fa15a83fb1a1326580d02490dbf8015f43239
-
SSDEEP
786432:3zKrKrbA+pjd0AG04wFoVKjPZCgJVehG4+d:D8K/A+pB0GZomCeVS+d
Static task
static1
Malware Config
Targets
-
-
Target
Verse V4.15.exe
-
Size
30.0MB
-
MD5
15ee2efb6fe685d6d5217c58c33d98e2
-
SHA1
4a6b8fcb5c21621a81c35cd367e186985044408c
-
SHA256
336c6f0d9de3de21f971c92e2239dac504580b4259602f9d602d0c4d7a2dacce
-
SHA512
23f0b7cd6b1412bd1a97910efd0462e3078139fafe3cc857d0969fb432448d85b65273822bee6daee8903394230fa15a83fb1a1326580d02490dbf8015f43239
-
SSDEEP
786432:3zKrKrbA+pjd0AG04wFoVKjPZCgJVehG4+d:D8K/A+pB0GZomCeVS+d
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-