Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

1

setup.exe

windows11-21h2-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    setup.exe

  • Size

    990KB

  • Sample

    240808-zxewqatdkc

  • MD5

    30f08be765efad10e7be896eacbf8eac

  • SHA1

    c0c89b5ba85a7507927acc60200667da759c4804

  • SHA256

    c3a52512be078685aba39201de71013bd27d586b52db3517cb321d6313a95432

  • SHA512

    2dfdb046eb225fe56ba397a109d6076d1833d044cf915e8dcb1684004d1ffb9db324a2f57d06c8f22132d707df7387c8db47f3b4a43173db32a2303a42a06e25

  • SSDEEP

    24576:gyIZEdtdAl0M8NPKTWqtvBFkB7j5Crb8ZZRhllp6OxMuBRUtm:gyfdDM8NPKTzwBhCAR1ac

Score
9/10
discoveryevasion

Malware Config

Targets

    • Target

      setup.exe

    • Size

      990KB

    • MD5

      30f08be765efad10e7be896eacbf8eac

    • SHA1

      c0c89b5ba85a7507927acc60200667da759c4804

    • SHA256

      c3a52512be078685aba39201de71013bd27d586b52db3517cb321d6313a95432

    • SHA512

      2dfdb046eb225fe56ba397a109d6076d1833d044cf915e8dcb1684004d1ffb9db324a2f57d06c8f22132d707df7387c8db47f3b4a43173db32a2303a42a06e25

    • SSDEEP

      24576:gyIZEdtdAl0M8NPKTWqtvBFkB7j5Crb8ZZRhllp6OxMuBRUtm:gyfdDM8NPKTzwBhCAR1ac

    Score
    9/10
    discoveryevasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks