Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
42s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
02/10/2022, 20:32
Static task
static1
Behavioral task
behavioral1
Sample
9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b.exe
Resource
win10v2004-20220812-en
General
-
Target
9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b.exe
-
Size
1.9MB
-
MD5
845d9b43b7d2f4a73aad79155473d00c
-
SHA1
737a47b7516a1c04df2a109fd9c0c441b97d3fa8
-
SHA256
9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b
-
SHA512
7b3b813e2e590767298f0b5b75a3e28402e735c234bcc5d70f3933e4f0918fd04af952fb2f86369393a0af6454c011f59b932e2a4ac8b2b7d2f66fd8f9f0c467
-
SSDEEP
24576:OuUHm/NQiI4L41f6GpPVLZ9KMYDZwf2FfWl8KuqGavkg3NyNIbbbIoIBAUZLYhzp:OuRN41fh9l9V+s8KuqGaX0ToIBAUZLYb
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1832-55-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-57-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-58-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-59-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-60-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-62-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-64-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-66-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-68-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-70-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-72-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-74-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-76-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-78-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-80-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-82-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-84-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-86-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-88-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-90-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-92-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-96-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-98-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-94-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-100-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/1832-101-0x0000000010000000-0x000000001003D000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1832 9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b.exe 1832 9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b.exe 1832 9c89ec02f1476749f8904f5202a2cfc46bf24e05fe52f018529e98f7da3c0b1b.exe