Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c3c524cc782fa892b12aa6840615cf1e55f9fd41e09bb7bf60c30acfbc651fba
-
Size
2.4MB
-
Sample
240420-cz7cesfa8s
-
MD5
2264205b3448647965c774f6d939f4a3
-
SHA1
6c52e8f804aeca1c3989ca30f738efd5334832f4
-
SHA256
c3c524cc782fa892b12aa6840615cf1e55f9fd41e09bb7bf60c30acfbc651fba
-
SHA512
3734a4766557f928bac7082fced1336cf6d4aa5d3d0e50808a3dcd3de06cb1a2ec562b5fa3ffa7cd2323b7c67aeaf44757da7c7355eec35d5fae17ff441f40af
-
SSDEEP
49152:Sz0TPaUAq+64bc31+SYDbDuWz817zQsxzf0QAM0finTfpYQUJFXms1:SMPot64mcSYD3uWknbd0QZ06nTKQUJln
Static task
static1
Behavioral task
behavioral1
Sample
c3c524cc782fa892b12aa6840615cf1e55f9fd41e09bb7bf60c30acfbc651fba.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c3c524cc782fa892b12aa6840615cf1e55f9fd41e09bb7bf60c30acfbc651fba.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
c3c524cc782fa892b12aa6840615cf1e55f9fd41e09bb7bf60c30acfbc651fba
-
Size
2.4MB
-
MD5
2264205b3448647965c774f6d939f4a3
-
SHA1
6c52e8f804aeca1c3989ca30f738efd5334832f4
-
SHA256
c3c524cc782fa892b12aa6840615cf1e55f9fd41e09bb7bf60c30acfbc651fba
-
SHA512
3734a4766557f928bac7082fced1336cf6d4aa5d3d0e50808a3dcd3de06cb1a2ec562b5fa3ffa7cd2323b7c67aeaf44757da7c7355eec35d5fae17ff441f40af
-
SSDEEP
49152:Sz0TPaUAq+64bc31+SYDbDuWz817zQsxzf0QAM0finTfpYQUJFXms1:SMPot64mcSYD3uWknbd0QZ06nTKQUJln
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
00a0194c20ee912257df53bfe258ee4a
-
SHA1
d7b4e319bc5119024690dc8230b9cc919b1b86b2
-
SHA256
dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
-
SHA512
3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -