Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

winprofile

windows7-x64

9

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    beac4e6145269334ebaf3d723fa089c0b336dac94ad12da55574b713c496516a

  • Size

    3.0MB

  • Sample

    240329-cb4avsfa73

  • MD5

    8f596cf662d3070c4778030b0ebf1697

  • SHA1

    ca4e9791887dfd346392e84670f3606e08b0da70

  • SHA256

    beac4e6145269334ebaf3d723fa089c0b336dac94ad12da55574b713c496516a

  • SHA512

    6db0f316dacf5ee6191d1574316ecc1ac7c90c21faf3d60795cb4fd2f9c57724bb1162286a37b104741ce64e63366480a1468a49bdd114e28110c8577f4b820c

  • SSDEEP

    49152:Liw3XBdJn9Lr7cm17ZzLhBORsllCvQGgpUGKOn:Ww3xzn9Lrl17NLzOR+m1PGK

Score
10/10
riseproevasionstealer

Malware Config

Targets

    • Target

      beac4e6145269334ebaf3d723fa089c0b336dac94ad12da55574b713c496516a

    • Size

      3.0MB

    • MD5

      8f596cf662d3070c4778030b0ebf1697

    • SHA1

      ca4e9791887dfd346392e84670f3606e08b0da70

    • SHA256

      beac4e6145269334ebaf3d723fa089c0b336dac94ad12da55574b713c496516a

    • SHA512

      6db0f316dacf5ee6191d1574316ecc1ac7c90c21faf3d60795cb4fd2f9c57724bb1162286a37b104741ce64e63366480a1468a49bdd114e28110c8577f4b820c

    • SSDEEP

      49152:Liw3XBdJn9Lr7cm17ZzLhBORsllCvQGgpUGKOn:Ww3xzn9Lrl17NLzOR+m1PGK

    Score
    10/10
    evasionriseprostealer

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

      stealerrisepro

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks