Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bf7aa0624c22cef01eea0407bce9ca3b
-
Size
456KB
-
Sample
240311-btfrvaha5v
-
MD5
bf7aa0624c22cef01eea0407bce9ca3b
-
SHA1
e7a37bd41122b08e9b86c9fdfb98dadb789b7f92
-
SHA256
fa58dac3c6a7a4e3ba1c7a4bbad5682bef6a55b4ffcc47d8c020b541b5846fe6
-
SHA512
144729449ab689d315bee23509c3152600812145ec41557e06e3ea95f5787c5ce82a4d425bd1bb44bc79ffe8b1f510b595cc863066aa23f2ae312ac378449890
-
SSDEEP
12288:4chdEKXcL1BtjxV8h5SFsyY/idP8epE4lK:xS061BZx2LyEX4lK
Static task
static1
Behavioral task
behavioral1
Sample
bf7aa0624c22cef01eea0407bce9ca3b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf7aa0624c22cef01eea0407bce9ca3b.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
bf7aa0624c22cef01eea0407bce9ca3b
-
Size
456KB
-
MD5
bf7aa0624c22cef01eea0407bce9ca3b
-
SHA1
e7a37bd41122b08e9b86c9fdfb98dadb789b7f92
-
SHA256
fa58dac3c6a7a4e3ba1c7a4bbad5682bef6a55b4ffcc47d8c020b541b5846fe6
-
SHA512
144729449ab689d315bee23509c3152600812145ec41557e06e3ea95f5787c5ce82a4d425bd1bb44bc79ffe8b1f510b595cc863066aa23f2ae312ac378449890
-
SSDEEP
12288:4chdEKXcL1BtjxV8h5SFsyY/idP8epE4lK:xS061BZx2LyEX4lK
Score7/10-
Executes dropped EXE
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Loads dropped DLL
-
Drops file in System32 directory
-