Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
51s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
14/06/2024, 09:34
General
-
Target
sample.exe
-
Size
8.2MB
-
MD5
e7d9ee8f6f2118fc5b90ed77ac1803e9
-
SHA1
1c3b0135d62b1305e7fc0f392249b76ae3bb6d4a
-
SHA256
f77ad888887105bd7bd8fddc646e11445d0378a8d2443cd6f50fc00f3834af41
-
SHA512
5ad37843243bc7360ca88d56fb829b7f5219561d41e9f5befda24002796003dca5e18b41233d4c5ea0c70415e466ed76ac0018a032de5d300d04a31dd1d03550
-
SSDEEP
196608:fG3NU4pkOiBvZxLRJR99dwBMqFJ+hIESNxEc3m:sNUv5/NL99dwBMqOsY0m
Malware Config
Signatures
-
Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Loads dropped DLL 1 IoCs
-
Themida packer 7 IoCs
Detects Themida, an advanced Windows software protection system.
-
Checks whether UAC is enabled 1 TTPs 1 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 19 IoCs
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\sample.exe"C:\Users\Admin\AppData\Local\Temp\sample.exe"1⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Loads dropped DLL
- Checks whether UAC is enabled
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10KB
MD52d7adffa791933d88f7e7b04558de0c2
SHA1a5fc7751c7bbfcb038b86838fffede41255304c4
SHA2569d1247485ba1865c4be7429580a5afb71e4ec8e656ee7a50bc565bf79def2880
SHA51246d308c5370e5b7ad14d42fe26d1c86fe62535ba77ea7d29cfd046fb96be8b3c296c88cea38d1e67722b4201340d307787f70599e89c44b56583ba626f93b29b
-
Filesize
18.4MB
-
Filesize
760KB
-
Filesize
760KB
-
Filesize
4KB
-
Filesize
18.4MB
-
Filesize
18.4MB
-
Filesize
18.4MB
-
Filesize
4KB
-
Filesize
18.4MB
-
Filesize
18.4MB
-
Filesize
760KB
-
Filesize
760KB
-
Filesize
18.4MB