Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

9e530edd37...32.exe

windows7-x64

9

9e530edd37...32.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9e530edd376a15b7ab757e2bf388aad3098e2700eeb3b2c906af73ffa86cf632

  • Size

    1.4MB

  • Sample

    240429-xx7kmaae92

  • MD5

    d70516aa97f6d7d77adb33c2615165a0

  • SHA1

    4e61a75048e5a61e76d6709e406240e614512fc9

  • SHA256

    9e530edd376a15b7ab757e2bf388aad3098e2700eeb3b2c906af73ffa86cf632

  • SHA512

    d44a94cbd07544dcc9c6e50af6d88d8a59845c5a7c0fe1ceb1237703c0c36f5d0cd59b6f28d0dd5dd802f6ab8d2000cf7794672148039271df92366e5f811435

  • SSDEEP

    24576:3RdN8go6HAIUZ0OfltQCDUF2G9Z1YItAKvRrSErCGyrJNUmp:3fup6M/U8CbYItA+rvrbyrJNn

Score
9/10
evasion

Malware Config

Targets

    • Target

      9e530edd376a15b7ab757e2bf388aad3098e2700eeb3b2c906af73ffa86cf632

    • Size

      1.4MB

    • MD5

      d70516aa97f6d7d77adb33c2615165a0

    • SHA1

      4e61a75048e5a61e76d6709e406240e614512fc9

    • SHA256

      9e530edd376a15b7ab757e2bf388aad3098e2700eeb3b2c906af73ffa86cf632

    • SHA512

      d44a94cbd07544dcc9c6e50af6d88d8a59845c5a7c0fe1ceb1237703c0c36f5d0cd59b6f28d0dd5dd802f6ab8d2000cf7794672148039271df92366e5f811435

    • SSDEEP

      24576:3RdN8go6HAIUZ0OfltQCDUF2G9Z1YItAKvRrSErCGyrJNUmp:3fup6M/U8CbYItA+rvrbyrJNn

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Looks for VMWare Tools registry key

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks