Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d07eb1cca55b5195006a27d2404c3a7c946eddd5a696d1927e37127083abb143
-
Size
95KB
-
Sample
240705-dme8va1epj
-
MD5
862e44eacdd56c24aa604045e91af3f6
-
SHA1
da539efe3591ffc8c97280b602919232f626624a
-
SHA256
d07eb1cca55b5195006a27d2404c3a7c946eddd5a696d1927e37127083abb143
-
SHA512
a7ca96556d30fb9aebbba635fd075bb1687335073334abe140075dde00ebdbd6c3e07f1ed719641dfa7e2780a3c252b7af60fa0576a6e94934a511543b773699
-
SSDEEP
768:IS8IpHdEtdm364D191lqnAfXz7tzykuKGqv3Msq/rz:vpMY37D191JfD7t+kuKGqUJz
Static task
static1
Behavioral task
behavioral1
Sample
d07eb1cca55b5195006a27d2404c3a7c946eddd5a696d1927e37127083abb143.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
d07eb1cca55b5195006a27d2404c3a7c946eddd5a696d1927e37127083abb143.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
guloader
https://drive.google.com/uc?export=download&id=1YBoLSiQywpFWRLmg4jO1ZmxoLr9XCFgI
Targets
-
-
Target
d07eb1cca55b5195006a27d2404c3a7c946eddd5a696d1927e37127083abb143
-
Size
95KB
-
MD5
862e44eacdd56c24aa604045e91af3f6
-
SHA1
da539efe3591ffc8c97280b602919232f626624a
-
SHA256
d07eb1cca55b5195006a27d2404c3a7c946eddd5a696d1927e37127083abb143
-
SHA512
a7ca96556d30fb9aebbba635fd075bb1687335073334abe140075dde00ebdbd6c3e07f1ed719641dfa7e2780a3c252b7af60fa0576a6e94934a511543b773699
-
SSDEEP
768:IS8IpHdEtdm364D191lqnAfXz7tzykuKGqv3Msq/rz:vpMY37D191JfD7t+kuKGqUJz
Score10/10-
Checks QEMU agent state file
Checks state file used by QEMU agent, possibly to detect virtualization.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-