Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
HAXCS2.rar
-
Size
7.2MB
-
Sample
240604-zgkf9sag3z
-
MD5
52acf46e6ba14ddabdd58283890aa4c8
-
SHA1
96b206d456023be51df24d23255727cdf32f7dfc
-
SHA256
bd41a503c41d45d06009d2625824ab8f63221877c8729a43599c9a3503de8bf8
-
SHA512
5931b32a95b62ac7131776304c8d3d74ef79fdf473d27173f00f6e622486a55e2dd799118284164597104aac006bd99116dd61f875501b2518c40fde177e6c93
-
SSDEEP
196608:Rhaah/oCDH8eORkLGT4t5jZIh2qlZ+qJ13IhQGd:RnL8t2GEdyoqlZ+s1I1d
Behavioral task
behavioral1
Sample
HAXCS2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
HAXCS2.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
protect.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
protect.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
HAXCS2.exe
-
Size
4.3MB
-
MD5
6acbf564dca6f58c3af2e92b245bacbb
-
SHA1
c3945f257fed5508cdf13db3babe8f4a8951af44
-
SHA256
86a4f5a9a35d13b173802ca596815aacdeed2a73168fc937befed0e7c790c139
-
SHA512
dc7d1a1f2f4d97f12faea67fc5783c525fad1eb0b1c8caedc83014e51cbbcd2c8a66592acc2d94fc84a25e2b3a90ba922d3c9e3073e9a495f11e0ebd055facf9
-
SSDEEP
98304:Eh9dxpuiFLvbQaU397ndYbA9ufAkD9jII/td5aZXtsAVnZhV3d:EbTp5LD897cAgfAkD900E9sA1Z73d
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
-
-
Target
protect.exe
-
Size
109KB
-
MD5
fae476e000fdd1963c8131845fd843d8
-
SHA1
34295a7f42b638a16503317cea2547be79a98dfa
-
SHA256
21eea4465350b51d88ff7284de92cc7a32ca62ff949a3a73090e56638776203e
-
SHA512
3fa5fd09e7cdc3d5615d5b4ee3d03556dceadffc918b74f381f63db6c437d2521264fa29eb655f1bf8f86a70fcd28078d6045b5b1dce8c8da63e9712abd24494
-
SSDEEP
1536:ferJ/rDysu6YEeVpOCE3lo7e7BmhqHbf:ferJE6YEeV8CE+67BmoHbf
Score1/10 -