Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
22s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
20/10/2022, 13:08
Behavioral task
behavioral1
Sample
7c0620f0252e2c4275ee3bf5e948ece16512731697f5ac1f373da808359c7fa9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7c0620f0252e2c4275ee3bf5e948ece16512731697f5ac1f373da808359c7fa9.exe
Resource
win10v2004-20220812-en
General
-
Target
7c0620f0252e2c4275ee3bf5e948ece16512731697f5ac1f373da808359c7fa9.exe
-
Size
84KB
-
MD5
a064e1442ce740a4363d29f4eec39700
-
SHA1
98504f0ca35b956d7b4112252d5f1b55b4360dae
-
SHA256
7c0620f0252e2c4275ee3bf5e948ece16512731697f5ac1f373da808359c7fa9
-
SHA512
68e5fba7a4138b5f4f0eb5845ed9ad6e4e5def82f78970ad50989a6f8b56a896580cc55042ff9bcd3a03b0c72e4978e786902ef99ef4b4617643372bef904577
-
SSDEEP
1536:MHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVt/2YRmA7hGRhTmtUQekHK:MHoLde/OgV432UcP39hXJZn/UEkTadeX
Malware Config
Signatures
-
Modifies AppInit DLL entries 2 TTPs
-
resource yara_rule behavioral1/memory/1032-54-0x0000000000400000-0x0000000000429000-memory.dmp upx -
Drops file in System32 directory 2 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\Wqk.dll 7c0620f0252e2c4275ee3bf5e948ece16512731697f5ac1f373da808359c7fa9.exe File created C:\Windows\SysWOW64\Wqk.dll 7c0620f0252e2c4275ee3bf5e948ece16512731697f5ac1f373da808359c7fa9.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\dextor32.exe 7c0620f0252e2c4275ee3bf5e948ece16512731697f5ac1f373da808359c7fa9.exe