Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

9

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4bd907e722de3cbaac74dcbfe26cc964053b45861cbff62a475c3d2f4be9f2f

  • Size

    3.0MB

  • Sample

    240327-jxkh7sfh89

  • MD5

    0345e55e9d82ffc4f1bc8832984be5c9

  • SHA1

    c1603cd4cd4e125f76a4a1757c272cfcfd35f0eb

  • SHA256

    f4bd907e722de3cbaac74dcbfe26cc964053b45861cbff62a475c3d2f4be9f2f

  • SHA512

    883034ae0df9599c209fea2a30e767053a01a4c6d2432c6c7dae68e47bf02c58c3116f4e4340f475ef2b2e2d4fed9b9eb5a184952d037999374d34b5583a7393

  • SSDEEP

    49152:sOAcA/oj6yX5aPdH2uBRsq0bNDsVJQKVXjKmG2uDCfdbmt70Rvb96y:sOPwoGyXzqGdQ1fdKSRv

Score
10/10
riseproevasionstealer

Malware Config

Targets

    • Target

      f4bd907e722de3cbaac74dcbfe26cc964053b45861cbff62a475c3d2f4be9f2f

    • Size

      3.0MB

    • MD5

      0345e55e9d82ffc4f1bc8832984be5c9

    • SHA1

      c1603cd4cd4e125f76a4a1757c272cfcfd35f0eb

    • SHA256

      f4bd907e722de3cbaac74dcbfe26cc964053b45861cbff62a475c3d2f4be9f2f

    • SHA512

      883034ae0df9599c209fea2a30e767053a01a4c6d2432c6c7dae68e47bf02c58c3116f4e4340f475ef2b2e2d4fed9b9eb5a184952d037999374d34b5583a7393

    • SSDEEP

      49152:sOAcA/oj6yX5aPdH2uBRsq0bNDsVJQKVXjKmG2uDCfdbmt70Rvb96y:sOPwoGyXzqGdQ1fdKSRv

    Score
    10/10
    evasionriseprostealer

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

      stealerrisepro

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks