Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

HAXCS2.exe

windows7-x64

9

HAXCS2.exe

windows10-2004-x64

9

protect.exe

windows7-x64

1

protect.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    HAXCS2.rar

  • Size

    7.2MB

  • Sample

    240604-zgkf9sag3z

  • MD5

    52acf46e6ba14ddabdd58283890aa4c8

  • SHA1

    96b206d456023be51df24d23255727cdf32f7dfc

  • SHA256

    bd41a503c41d45d06009d2625824ab8f63221877c8729a43599c9a3503de8bf8

  • SHA512

    5931b32a95b62ac7131776304c8d3d74ef79fdf473d27173f00f6e622486a55e2dd799118284164597104aac006bd99116dd61f875501b2518c40fde177e6c93

  • SSDEEP

    196608:Rhaah/oCDH8eORkLGT4t5jZIh2qlZ+qJ13IhQGd:RnL8t2GEdyoqlZ+s1I1d

Score
9/10
evasionthemidatrojan

Malware Config

Targets

    • Target

      HAXCS2.exe

    • Size

      4.3MB

    • MD5

      6acbf564dca6f58c3af2e92b245bacbb

    • SHA1

      c3945f257fed5508cdf13db3babe8f4a8951af44

    • SHA256

      86a4f5a9a35d13b173802ca596815aacdeed2a73168fc937befed0e7c790c139

    • SHA512

      dc7d1a1f2f4d97f12faea67fc5783c525fad1eb0b1c8caedc83014e51cbbcd2c8a66592acc2d94fc84a25e2b3a90ba922d3c9e3073e9a495f11e0ebd055facf9

    • SSDEEP

      98304:Eh9dxpuiFLvbQaU397ndYbA9ufAkD9jII/td5aZXtsAVnZhV3d:EbTp5LD897cAgfAkD900E9sA1Z73d

    Score
    9/10
    evasionthemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

    • Target

      protect.exe

    • Size

      109KB

    • MD5

      fae476e000fdd1963c8131845fd843d8

    • SHA1

      34295a7f42b638a16503317cea2547be79a98dfa

    • SHA256

      21eea4465350b51d88ff7284de92cc7a32ca62ff949a3a73090e56638776203e

    • SHA512

      3fa5fd09e7cdc3d5615d5b4ee3d03556dceadffc918b74f381f63db6c437d2521264fa29eb655f1bf8f86a70fcd28078d6045b5b1dce8c8da63e9712abd24494

    • SSDEEP

      1536:ferJ/rDysu6YEeVpOCE3lo7e7BmhqHbf:ferJE6YEeV8CE+67BmoHbf

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks