Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
88s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
29/10/2022, 15:36
Static task
static1
Behavioral task
behavioral1
Sample
54798122589f33cc7f8579e6976c6e3e5468315478fa1490b418a77f1ed99fd5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
54798122589f33cc7f8579e6976c6e3e5468315478fa1490b418a77f1ed99fd5.exe
Resource
win10v2004-20220901-en
General
-
Target
54798122589f33cc7f8579e6976c6e3e5468315478fa1490b418a77f1ed99fd5.exe
-
Size
232KB
-
MD5
c16935a73cdef1a79fdecfea52805c10
-
SHA1
2a3f389a3955a65fd80e3c9ecbdd075d3c7314d9
-
SHA256
54798122589f33cc7f8579e6976c6e3e5468315478fa1490b418a77f1ed99fd5
-
SHA512
e3699efe7d8f30528bdfb3e2dc75c943d7dd3b2cce12b7083f003a91e71297d889d9ce06e9817225c1245c4247bdb9788255276e4a33cd271c728880105afdc3
-
SSDEEP
3072:9df1kEQWtAKXbPd3huonXVZwcJaQOMpJq7OUe+gkww:9dNkEbrPdn3vEMWe+Ew
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1916 54798122589f33cc7f8579e6976c6e3e5468315478fa1490b418a77f1ed99fd5.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1916 54798122589f33cc7f8579e6976c6e3e5468315478fa1490b418a77f1ed99fd5.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\54798122589f33cc7f8579e6976c6e3e5468315478fa1490b418a77f1ed99fd5.exe"C:\Users\Admin\AppData\Local\Temp\54798122589f33cc7f8579e6976c6e3e5468315478fa1490b418a77f1ed99fd5.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:1916