Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

c3c524cc78...ba.exe

windows7-x64

9

c3c524cc78...ba.exe

windows10-2004-x64

9

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c3c524cc782fa892b12aa6840615cf1e55f9fd41e09bb7bf60c30acfbc651fba

  • Size

    2.4MB

  • Sample

    240420-cz7cesfa8s

  • MD5

    2264205b3448647965c774f6d939f4a3

  • SHA1

    6c52e8f804aeca1c3989ca30f738efd5334832f4

  • SHA256

    c3c524cc782fa892b12aa6840615cf1e55f9fd41e09bb7bf60c30acfbc651fba

  • SHA512

    3734a4766557f928bac7082fced1336cf6d4aa5d3d0e50808a3dcd3de06cb1a2ec562b5fa3ffa7cd2323b7c67aeaf44757da7c7355eec35d5fae17ff441f40af

  • SSDEEP

    49152:Sz0TPaUAq+64bc31+SYDbDuWz817zQsxzf0QAM0finTfpYQUJFXms1:SMPot64mcSYD3uWknbd0QZ06nTKQUJln

Score
9/10
evasion

Malware Config

Targets

    • Target

      c3c524cc782fa892b12aa6840615cf1e55f9fd41e09bb7bf60c30acfbc651fba

    • Size

      2.4MB

    • MD5

      2264205b3448647965c774f6d939f4a3

    • SHA1

      6c52e8f804aeca1c3989ca30f738efd5334832f4

    • SHA256

      c3c524cc782fa892b12aa6840615cf1e55f9fd41e09bb7bf60c30acfbc651fba

    • SHA512

      3734a4766557f928bac7082fced1336cf6d4aa5d3d0e50808a3dcd3de06cb1a2ec562b5fa3ffa7cd2323b7c67aeaf44757da7c7355eec35d5fae17ff441f40af

    • SSDEEP

      49152:Sz0TPaUAq+64bc31+SYDbDuWz817zQsxzf0QAM0finTfpYQUJFXms1:SMPot64mcSYD3uWknbd0QZ06nTKQUJln

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks