Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    2.7MB

  • Sample

    241122-sn192ayrcq

  • MD5

    6ce5ba4cdad8d3bb822d83e3a869e8f2

  • SHA1

    3c575e2135da2e7303da679673ae5d7a28dd0e88

  • SHA256

    8875a132bd534081881f9000bac6b9695199bc585b86e0f313b07e8a3b6f3744

  • SHA512

    524a60290736f6bfe6f31671f00d2b116dc4bd76896c32cb0790d3ba55e9d8d35681b34a1572c5549b2f06795f44ec07163b4a95b83144b1ff8515f848fa80c9

  • SSDEEP

    49152:6MtagsyuxMM0Rgxp4rJsofSMfoQ/f7tbQYhBQzp0RfR55H:bXsytM0RgP4raWSWbfJnDJ

Score
10/10
discoveryevasiontrojan

Malware Config

Targets

    • Target

      file.exe

    • Size

      2.7MB

    • MD5

      6ce5ba4cdad8d3bb822d83e3a869e8f2

    • SHA1

      3c575e2135da2e7303da679673ae5d7a28dd0e88

    • SHA256

      8875a132bd534081881f9000bac6b9695199bc585b86e0f313b07e8a3b6f3744

    • SHA512

      524a60290736f6bfe6f31671f00d2b116dc4bd76896c32cb0790d3ba55e9d8d35681b34a1572c5549b2f06795f44ec07163b4a95b83144b1ff8515f848fa80c9

    • SSDEEP

      49152:6MtagsyuxMM0Rgxp4rJsofSMfoQ/f7tbQYhBQzp0RfR55H:bXsytM0RgP4raWSWbfJnDJ

    Score
    10/10
    discoveryevasiontrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Windows security modification

      evasiontrojan

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks