Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

2d585c1eda...d0.exe

windows7-x64

9

2d585c1eda...d0.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d585c1eda482120901f878d4f394a8796c316102d3f957b73565862989ab4d0

  • Size

    8.7MB

  • Sample

    250328-l87tzswpy4

  • MD5

    605ab1eaaa0f22a5884b703ace476e66

  • SHA1

    200ef10925d33afc80094c4da77055acf07c9ed9

  • SHA256

    2d585c1eda482120901f878d4f394a8796c316102d3f957b73565862989ab4d0

  • SHA512

    6e4a5624312fbee85816b67fad46265093ab439c2f8c331899c08d290f53ee3dda77c4d224d288e44b69c777ed527039bc96a11d58b9474d82767912e8a1e34f

  • SSDEEP

    98304:r4XaZDS9+Q2jHX6uYYZN1Vac32z64SDHNprebZtjKjCB3bFWDxFFcUrvS/6Qc:Qt96HKuYYXF09IgYjCB3bmxV9Qc

Score
9/10
defense_evasiondiscoverythemidatrojan

Malware Config

Targets

    • Target

      2d585c1eda482120901f878d4f394a8796c316102d3f957b73565862989ab4d0

    • Size

      8.7MB

    • MD5

      605ab1eaaa0f22a5884b703ace476e66

    • SHA1

      200ef10925d33afc80094c4da77055acf07c9ed9

    • SHA256

      2d585c1eda482120901f878d4f394a8796c316102d3f957b73565862989ab4d0

    • SHA512

      6e4a5624312fbee85816b67fad46265093ab439c2f8c331899c08d290f53ee3dda77c4d224d288e44b69c777ed527039bc96a11d58b9474d82767912e8a1e34f

    • SSDEEP

      98304:r4XaZDS9+Q2jHX6uYYZN1Vac32z64SDHNprebZtjKjCB3bFWDxFFcUrvS/6Qc:Qt96HKuYYXF09IgYjCB3bmxV9Qc

    Score
    9/10
    defense_evasiondiscoverythemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      defense_evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      defense_evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks