Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
81s -
max time network
52s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
07/11/2022, 05:45
Static task
static1
Behavioral task
behavioral1
Sample
0bfb1d6f29ac9db0b475d47c1a7976a968f2ec9678b3749d6f77badc434e6dcb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0bfb1d6f29ac9db0b475d47c1a7976a968f2ec9678b3749d6f77badc434e6dcb.exe
Resource
win10v2004-20220812-en
General
-
Target
0bfb1d6f29ac9db0b475d47c1a7976a968f2ec9678b3749d6f77badc434e6dcb.exe
-
Size
186KB
-
MD5
0cd759ba4f3d564da900d35abd07b030
-
SHA1
9f3b2ab0a399ee3d7e89df790bed1fc87c4719db
-
SHA256
0bfb1d6f29ac9db0b475d47c1a7976a968f2ec9678b3749d6f77badc434e6dcb
-
SHA512
71caaf596b4f564653ef71b6af09f078d9b99cfd2181e90ceb0ea83e7393a68c8c5e9aed4bc5f4ae5bc787f0e30c08987a2a226c04cef368094979dd6cf3e1d7
-
SSDEEP
3072:usaHDDNo6/c0Xg0L/rZPFBpMNjypLb7Ot2MfcJaQOMpJq71qSDJwq:usaHDDR00Xg0bDojypLb7yWEMFQCq
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1364 0bfb1d6f29ac9db0b475d47c1a7976a968f2ec9678b3749d6f77badc434e6dcb.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1364 0bfb1d6f29ac9db0b475d47c1a7976a968f2ec9678b3749d6f77badc434e6dcb.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\0bfb1d6f29ac9db0b475d47c1a7976a968f2ec9678b3749d6f77badc434e6dcb.exe"C:\Users\Admin\AppData\Local\Temp\0bfb1d6f29ac9db0b475d47c1a7976a968f2ec9678b3749d6f77badc434e6dcb.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:1364