Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    15a1e0c61a71ed6b17625c6e43944ff20c7b87ab555f30f00a7dbc991a56aa40

  • Size

    5.3MB

  • Sample

    240625-kx36zszfkb

  • MD5

    c8627d527e77a0ef72d4cf95c2372029

  • SHA1

    fb137315fc704f3440c1598431af75972794c673

  • SHA256

    15a1e0c61a71ed6b17625c6e43944ff20c7b87ab555f30f00a7dbc991a56aa40

  • SHA512

    e94ed1163969eb3ab88d5f922b51e13b9477f5107eddc409c2ddecca326bbb8867ff89186800f5f792e19ff52c34694debfea3a2d24f0464bd5fae742a0b1c90

  • SSDEEP

    98304:LCPwQxcW9q8uwKVDhkIzfNhicx/aktet2uucyOZqcTXj5M3H4hOFe:qtiW9qZwKfVzbicxycG2uvFBzja3H4hb

Malware Config

Targets

    • Target

      15a1e0c61a71ed6b17625c6e43944ff20c7b87ab555f30f00a7dbc991a56aa40

    • Size

      5.3MB

    • MD5

      c8627d527e77a0ef72d4cf95c2372029

    • SHA1

      fb137315fc704f3440c1598431af75972794c673

    • SHA256

      15a1e0c61a71ed6b17625c6e43944ff20c7b87ab555f30f00a7dbc991a56aa40

    • SHA512

      e94ed1163969eb3ab88d5f922b51e13b9477f5107eddc409c2ddecca326bbb8867ff89186800f5f792e19ff52c34694debfea3a2d24f0464bd5fae742a0b1c90

    • SSDEEP

      98304:LCPwQxcW9q8uwKVDhkIzfNhicx/aktet2uucyOZqcTXj5M3H4hOFe:qtiW9qZwKfVzbicxycG2uvFBzja3H4hb

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks whether UAC is enabled

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks