Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
tmp
-
Size
3.1MB
-
Sample
240415-lcgmxsba29
-
MD5
830e6ad0276a69d53ae9474b938467d2
-
SHA1
9fccd1be2de986b7d2f18f31bd56ef7991a9ff4f
-
SHA256
ebeb57452612627c9dc6c17a600b344449d763b343bf51f2be2b7f4a1dd5b2b1
-
SHA512
1173e7e5a597a54e1e86a2ff5a88a5076c87743cca86ea7b432ca4781a222fae98d63fb1687c38184141e34c462b6e2b9fcc231b246e245e1191e91beeb58955
-
SSDEEP
49152:GIvsqqWsLrhL9opNIr8KdSSuwQkBxAsJ34cLc5dAdNMsEahryAdaaO8Sk4DXovJt:3vsqeNaULAwQkLf31MpahryGX14Tst
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
tmp
-
Size
3.1MB
-
MD5
830e6ad0276a69d53ae9474b938467d2
-
SHA1
9fccd1be2de986b7d2f18f31bd56ef7991a9ff4f
-
SHA256
ebeb57452612627c9dc6c17a600b344449d763b343bf51f2be2b7f4a1dd5b2b1
-
SHA512
1173e7e5a597a54e1e86a2ff5a88a5076c87743cca86ea7b432ca4781a222fae98d63fb1687c38184141e34c462b6e2b9fcc231b246e245e1191e91beeb58955
-
SSDEEP
49152:GIvsqqWsLrhL9opNIr8KdSSuwQkBxAsJ34cLc5dAdNMsEahryAdaaO8Sk4DXovJt:3vsqeNaULAwQkLf31MpahryGX14Tst
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-