Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
42s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
30/10/2022, 12:07
Static task
static1
Behavioral task
behavioral1
Sample
c3ddfa021b2a3aaa4618bc287c6ee9c3fc8db1f5a3646a7dddfe6ce1fb524da3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c3ddfa021b2a3aaa4618bc287c6ee9c3fc8db1f5a3646a7dddfe6ce1fb524da3.exe
Resource
win10v2004-20220812-en
General
-
Target
c3ddfa021b2a3aaa4618bc287c6ee9c3fc8db1f5a3646a7dddfe6ce1fb524da3.exe
-
Size
96KB
-
MD5
933cf1b396ae41ff1f4bc9e45ea55e7e
-
SHA1
be8ce0d18739c96cef5a7ab18d674c08b709ea4b
-
SHA256
c3ddfa021b2a3aaa4618bc287c6ee9c3fc8db1f5a3646a7dddfe6ce1fb524da3
-
SHA512
22ecffb5338e2d04925d88f7a62e8c9fcbb4dfbd784eb9caf7d3656e9e567b39a524a64a10e030873099a06bbd5f3bf0b99fc4a67a3f9a44e483cc584b4ce623
-
SSDEEP
1536:Qy1bT9UhW2TBnaTuPEnSaFSHpSQ88oJFFHTnGmDqaklqqRY8H+9Q:RppZ4Z7aGpL88o3Fnul3RY8H+2
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 1280 c3ddfa021b2a3aaa4618bc287c6ee9c3fc8db1f5a3646a7dddfe6ce1fb524da3.exe -
Suspicious behavior: MapViewOfSection 2 IoCs
pid Process 1280 c3ddfa021b2a3aaa4618bc287c6ee9c3fc8db1f5a3646a7dddfe6ce1fb524da3.exe 1280 c3ddfa021b2a3aaa4618bc287c6ee9c3fc8db1f5a3646a7dddfe6ce1fb524da3.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c3ddfa021b2a3aaa4618bc287c6ee9c3fc8db1f5a3646a7dddfe6ce1fb524da3.exe"C:\Users\Admin\AppData\Local\Temp\c3ddfa021b2a3aaa4618bc287c6ee9c3fc8db1f5a3646a7dddfe6ce1fb524da3.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: MapViewOfSection
PID:1280