Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d984b7fc69ced467f65b814f419593c6eb5215c7242566b227377f05c9b44a94
-
Size
2.3MB
-
Sample
240622-mqa8qsyckr
-
MD5
47c35de14b10d11949eee87b8a1bcc2b
-
SHA1
44abf0fc8403ad2e078aac981deb3f6da74c7fc7
-
SHA256
d984b7fc69ced467f65b814f419593c6eb5215c7242566b227377f05c9b44a94
-
SHA512
2ab92ca6757f68ae2e387697b16fdf9b56f06ef09c925258f37c97a3f107bf06da1dcdc088ce9a41a9aa13ced98e08b4d422b400e61e9174b8f335d5247a6348
-
SSDEEP
49152:kiEfRbJCY7agqZix/MdFJFld1mM7+FGzgGkhjisc2lHeysAyB5a:ki0bYYugqZwcdP+FvdjiglHzYB
Static task
static1
Behavioral task
behavioral1
Sample
d984b7fc69ced467f65b814f419593c6eb5215c7242566b227377f05c9b44a94.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
risepro
77.91.77.66:58709
Targets
-
-
Target
d984b7fc69ced467f65b814f419593c6eb5215c7242566b227377f05c9b44a94
-
Size
2.3MB
-
MD5
47c35de14b10d11949eee87b8a1bcc2b
-
SHA1
44abf0fc8403ad2e078aac981deb3f6da74c7fc7
-
SHA256
d984b7fc69ced467f65b814f419593c6eb5215c7242566b227377f05c9b44a94
-
SHA512
2ab92ca6757f68ae2e387697b16fdf9b56f06ef09c925258f37c97a3f107bf06da1dcdc088ce9a41a9aa13ced98e08b4d422b400e61e9174b8f335d5247a6348
-
SSDEEP
49152:kiEfRbJCY7agqZix/MdFJFld1mM7+FGzgGkhjisc2lHeysAyB5a:ki0bYYugqZwcdP+FvdjiglHzYB
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-