Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    277915c199d1c52a7a3c7442ab83b98a9cfda120726bca7c77fe997b6d711b42

  • Size

    3.0MB

  • Sample

    240405-vd9vjahh57

  • MD5

    0aaed8d1841c93a8fac1f6c4c8ce938a

  • SHA1

    8631d0a15594956597b754ddbd3dfc2a10a57fd3

  • SHA256

    277915c199d1c52a7a3c7442ab83b98a9cfda120726bca7c77fe997b6d711b42

  • SHA512

    6b40bed2911d4ecc737a79cb999be8ecb597f435459f3485088d96e6f62abecc0e09953d7d22683359140be91c9d282799eaad01334401161d776292272b1854

  • SSDEEP

    49152:zJQXvD1M74SlaZG2FkGmh3XwJAY4EkDJ88nx/WPHVCZgIcHEogb2DOYNchhcQR:zJ6MlaZGf73XiAvrJbxOPHVC1WgbF1hL

Malware Config

Targets

    • Target

      277915c199d1c52a7a3c7442ab83b98a9cfda120726bca7c77fe997b6d711b42

    • Size

      3.0MB

    • MD5

      0aaed8d1841c93a8fac1f6c4c8ce938a

    • SHA1

      8631d0a15594956597b754ddbd3dfc2a10a57fd3

    • SHA256

      277915c199d1c52a7a3c7442ab83b98a9cfda120726bca7c77fe997b6d711b42

    • SHA512

      6b40bed2911d4ecc737a79cb999be8ecb597f435459f3485088d96e6f62abecc0e09953d7d22683359140be91c9d282799eaad01334401161d776292272b1854

    • SSDEEP

      49152:zJQXvD1M74SlaZG2FkGmh3XwJAY4EkDJ88nx/WPHVCZgIcHEogb2DOYNchhcQR:zJ6MlaZGf73XiAvrJbxOPHVC1WgbF1hL

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks