Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

977672b6b7...ff.exe

windows7-x64

7

977672b6b7...ff.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    977672b6b78578b5e79d76bc722d2abc6c616e5d979da296587df6c72a04e9ff

  • Size

    9.6MB

  • Sample

    240524-ktwyhabg8t

  • MD5

    146d968d785af6985c30bd2477a6940f

  • SHA1

    9a7090a5c0224b0bf097bd1b0891bd8439ad502a

  • SHA256

    977672b6b78578b5e79d76bc722d2abc6c616e5d979da296587df6c72a04e9ff

  • SHA512

    5b1a6a7a37cf04019b9ab1523223f0cb52b1fc337dac115518847e974167fa2dc9cafa9295822e52966bb3c859ef502cb40aaf390bcbac0d9d6d6cacbce5b502

  • SSDEEP

    196608:wzMJddRw6IfM4B8f5UmwhDaUyRsCnCfv2A24C1iN7RFNurZ/A1lM:wzmRw6I24OyACnT24qiN778tovM

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      977672b6b78578b5e79d76bc722d2abc6c616e5d979da296587df6c72a04e9ff

    • Size

      9.6MB

    • MD5

      146d968d785af6985c30bd2477a6940f

    • SHA1

      9a7090a5c0224b0bf097bd1b0891bd8439ad502a

    • SHA256

      977672b6b78578b5e79d76bc722d2abc6c616e5d979da296587df6c72a04e9ff

    • SHA512

      5b1a6a7a37cf04019b9ab1523223f0cb52b1fc337dac115518847e974167fa2dc9cafa9295822e52966bb3c859ef502cb40aaf390bcbac0d9d6d6cacbce5b502

    • SSDEEP

      196608:wzMJddRw6IfM4B8f5UmwhDaUyRsCnCfv2A24C1iN7RFNurZ/A1lM:wzmRw6I24OyACnT24qiN778tovM

    Score
    7/10
    vmprotect

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks