Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    setup.exe

  • Size

    990KB

  • Sample

    240808-zxewqatdkc

  • MD5

    30f08be765efad10e7be896eacbf8eac

  • SHA1

    c0c89b5ba85a7507927acc60200667da759c4804

  • SHA256

    c3a52512be078685aba39201de71013bd27d586b52db3517cb321d6313a95432

  • SHA512

    2dfdb046eb225fe56ba397a109d6076d1833d044cf915e8dcb1684004d1ffb9db324a2f57d06c8f22132d707df7387c8db47f3b4a43173db32a2303a42a06e25

  • SSDEEP

    24576:gyIZEdtdAl0M8NPKTWqtvBFkB7j5Crb8ZZRhllp6OxMuBRUtm:gyfdDM8NPKTzwBhCAR1ac

Score
9/10

Malware Config

Targets

    • Target

      setup.exe

    • Size

      990KB

    • MD5

      30f08be765efad10e7be896eacbf8eac

    • SHA1

      c0c89b5ba85a7507927acc60200667da759c4804

    • SHA256

      c3a52512be078685aba39201de71013bd27d586b52db3517cb321d6313a95432

    • SHA512

      2dfdb046eb225fe56ba397a109d6076d1833d044cf915e8dcb1684004d1ffb9db324a2f57d06c8f22132d707df7387c8db47f3b4a43173db32a2303a42a06e25

    • SSDEEP

      24576:gyIZEdtdAl0M8NPKTWqtvBFkB7j5Crb8ZZRhllp6OxMuBRUtm:gyfdDM8NPKTzwBhCAR1ac

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks