Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c9eec4e2ee0d98b7ce034e48583283ba
-
Size
1.1MB
-
Sample
240314-3q44tacg54
-
MD5
c9eec4e2ee0d98b7ce034e48583283ba
-
SHA1
c65f306672294755cf780dc7b3cb762d4a73194c
-
SHA256
675f232b9201fa960cf160fe266b4842cc8fa6a621fb33b682732552eff4ab29
-
SHA512
fcdfbee6be58659bf38f08359b6ba5095660d4f575f92c721c594aa88af11475448b64756149ac6b561f1f71d6f3f16953b7bd11eaabb579de071e4f02d378e5
-
SSDEEP
24576:RaCz5Hg7E/OYwcPXGO4AQdZR6y7U3oWYxj1NYf2hb5:MqtkYzPXvQvJ7BBt1YCF
Static task
static1
Behavioral task
behavioral1
Sample
c9eec4e2ee0d98b7ce034e48583283ba.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c9eec4e2ee0d98b7ce034e48583283ba.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
c9eec4e2ee0d98b7ce034e48583283ba
-
Size
1.1MB
-
MD5
c9eec4e2ee0d98b7ce034e48583283ba
-
SHA1
c65f306672294755cf780dc7b3cb762d4a73194c
-
SHA256
675f232b9201fa960cf160fe266b4842cc8fa6a621fb33b682732552eff4ab29
-
SHA512
fcdfbee6be58659bf38f08359b6ba5095660d4f575f92c721c594aa88af11475448b64756149ac6b561f1f71d6f3f16953b7bd11eaabb579de071e4f02d378e5
-
SSDEEP
24576:RaCz5Hg7E/OYwcPXGO4AQdZR6y7U3oWYxj1NYf2hb5:MqtkYzPXvQvJ7BBt1YCF
Score7/10-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of SetThreadContext
-