Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
169s -
max time network
217s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
27/11/2022, 18:25
Static task
static1
Behavioral task
behavioral1
Sample
164d7de9142fb31f53c916b522ae7bc97fed419b1b3b7db0f533033aa834a49a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
164d7de9142fb31f53c916b522ae7bc97fed419b1b3b7db0f533033aa834a49a.exe
Resource
win10v2004-20221111-en
General
-
Target
164d7de9142fb31f53c916b522ae7bc97fed419b1b3b7db0f533033aa834a49a.exe
-
Size
568KB
-
MD5
be30652e0ef68b8ea767302f6a0e325e
-
SHA1
0ac6b0956d5e1fc1b6739cb5ecdd6b030f06a6c0
-
SHA256
164d7de9142fb31f53c916b522ae7bc97fed419b1b3b7db0f533033aa834a49a
-
SHA512
7608c6dcf29f9d9826f6e7dce7cd5e8d171c351aced9f485e8972a1f770e0ae52a169a27cd0292e260a0c69c4b3141c753408a4b102f94b1a0517d8f0ab84873
-
SSDEEP
12288:vc4fPnU0h67HiDS5h9v8/YgN9+tr1IogHB3KfP8b7IpJi2Oz9ZfGOzPD:U4nO7CpQy98GjBacP6XCjzb
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1236-55-0x0000000000400000-0x00000000004DD000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3406023954-474543476-3319432036-1000\Software\Microsoft\Windows\CurrentVersion\Run\AS2014 = "C:\\ProgramData\\i9VVig6x\\i9VVig6x.exe" 164d7de9142fb31f53c916b522ae7bc97fed419b1b3b7db0f533033aa834a49a.exe