Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

bdfa67618e...6e.dll

windows7-x64

7

bdfa67618e...6e.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bdfa67618e35ffb527e2872924df1d6e

  • Size

    626KB

  • Sample

    240310-hvpvgaeh76

  • MD5

    bdfa67618e35ffb527e2872924df1d6e

  • SHA1

    99484b6a9d63f795614f400c0613649edeadfdef

  • SHA256

    dbcd7f58b8c902cb3ba1736c83fb0244d4f3c977293cb3779c8c58e956294b79

  • SHA512

    c0e8aac869205bb0f1e4473eba59752c90d9a65f592176c683a74ec3cb7c0c36ef80806243e995df82e082feb4baeec4febfd3541d5ba69bc8c45c0f722fdfc3

  • SSDEEP

    12288:Qos1REnzqLczCsJ6GUKwl22uizhWl46+lqTst/CtTB7yCPf/+PNTIZIl:e1+DGxldz46DlQs9k9yCP3+FTK

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      bdfa67618e35ffb527e2872924df1d6e

    • Size

      626KB

    • MD5

      bdfa67618e35ffb527e2872924df1d6e

    • SHA1

      99484b6a9d63f795614f400c0613649edeadfdef

    • SHA256

      dbcd7f58b8c902cb3ba1736c83fb0244d4f3c977293cb3779c8c58e956294b79

    • SHA512

      c0e8aac869205bb0f1e4473eba59752c90d9a65f592176c683a74ec3cb7c0c36ef80806243e995df82e082feb4baeec4febfd3541d5ba69bc8c45c0f722fdfc3

    • SSDEEP

      12288:Qos1REnzqLczCsJ6GUKwl22uizhWl46+lqTst/CtTB7yCPf/+PNTIZIl:e1+DGxldz46DlQs9k9yCP3+FTK

    Score
    7/10
    evasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks